https://bharathvaj.com/posts/sso-vs-oauth/