the wisdom of oauth2