Y(et) A(nother) Oauth2 provider. Lightweight but tries to closely follow the spec.