REDCORE-206 webservices layer with authentication

agree, a submodule will allow us to have it always up to date.

also, why instead of having it as libraries/redcore/api/oauth2 not put it into libraries/oauth2

OR

use composer and put it in the vendors folder.