Add OAuth2 bearer/token tests
Simplify httpbin side of local authentication tests