OAuth and the long way to Proof of Possession - Dominick Baier & Steinar Noem - NDC Security 2023