adding restify-oauth2, can now get a token and access protected resource, next step is to get it hooked into accounts and backed in redis