Implement OAuth 2.0 flow factory.
Implement resource server role.
Fix factory implementation.
Implement middleware for token invalidation.
Use return_uri when redirect to unauthorized URL.