OAuth for Spring Security

"Additive" WWW-Authenticate header