Adds root and exclude to oauth2

please merge #603 first