continue oauth2 integration

fixes #6: internims p2p signature to include info about request.

@gsfr: can you take a look when you have time?