- OAuth2 -> support refresh tokens
- Localize all the things