sso-auth: OAuth 2.1 authorization server