Let's fix OAuth in MCP

Let's not overthink auth in MCP.