first cut of api

added example oauth2 server