oauth2 vs controller | What are the differences? | StackShare