How would we approach OAuth in Relay? Should we create a command or url routes to verify oauth, according to the OAuth spec for MCP?