Exploring OAuth-Protected APIs
with a simple proxy