@sundriedcoder definitely go with OAuth 2, and draft 10 is probably the most widely deployed. The newer ones are very much in flux.