added oauth middleware for web app