http://intothesymmetry.blogspot.ch/2014/02/oauth-2-attacks-and-bug-bounties.html