OAuth for MCP explained with a real-world example