https://medium.com/@himanshu675/why-oauth2-is-overkill-controversial-yet-simple-ways-to-secure-internal-apis-in-spring-boot-a56880a7159c
