Implement OAuth2 for REST API in Loopback 2