fixed bug in oauth2 security factory, fixed service names