Verifiable Delegated Authorization for User-Centric Architectures and an OAuth2 Implementation