oauth2 and protected resources added