APaskulin (WMF)/OAuth 2.0 notes