I’m building my own OAuth provider. I know there’s a lot of options out there but I’ve built one at work for the last 5 years and I’d like to “do it right”