https://gluu.co/central-oauth2-tokens → http://www.gluu.org/blog/how-to-centrally-issue-oauth-tokens-for-api-access-management/