removed explicit aouth2 dependency and subclassed strategy from oauth2 strategy