Latest mcp server spec provides auth support. Can you remove the current static jwt code and replace it with an oauth flow?