add happy-path tests for oauth2