make requests to OAuth2 APIs