minor notes from integrating with golang:
- don't panic in the middleware. any errors can be logged and the endpoint can respond with a status code.
- consider moving more initialization to the middleware.
- custom oauth2 example on the main setup examples