Authentication and authorization using OAuth