https://gauravnarwani.com/oauth-2-0-security/