How to secure your MCP Servers with self-hosted OAuth2.1 server