create OAuth2 token, assumes 'edx-notes' OAuth client present in db