Infra 167 web oauth2

I thought so, but testing reveals otherwise. Removed.
a027809