finish basic oauth 2.0 work flow
remove unneed codes