create an oauth api endpoint for external clients