https://wp.jochen.hayek.name/blog-en/2012/01/01/an-open-standard-for-authorization-oauth-2-0/