route oauth2 notes