In between NGINX and your OAuth provider