cms-auth: OAuth proxy OK