Add OAuth trust level restrict api access based on an applications trust level
Add Authorization scope check and specs
Remove unused spec file
Don't override oauth applications route