Key facts about OAuth 2.0