add oauth2, logger plugin, rework auth