https://www.cloud4u.com/blog/oauth-overview/