OAuth2 SSO client — token verification, callback controller, and route helper.
register | forgot password?