[ChicagoDave]

This is an excellent article. It's not easy to manage, but if you get OAuth 2 right, you should be secure.