debug oauth2 credentials flow