box authentication through Oauth2 gem only