OAuth2 token can be used as API Key