Add naive oauth access token endpoint

WIP on #1