Building a Hacker News OAuth Provider from First Principles