oauth2 isn't that hard, once you get the hang of it. got a working implementation for the backend