title: Separating Auth server and Resource server in oAuth 2.0
body: <p>I am trying to create oAuth 2.0 app and have decided to separate Auth server and Resource servers. 
  How should I go about maintaining state in Clients</p>
  
  <p>Client will request for auth token to auth server. And auth server will verify and send in tokens. Till this part I understand. How should I now be using token. Should I be doing request to Resource server directly with access token and Resource server should verify that access token with Auth server? OR should I be first making request to auth server and then verify and forward request to Resource server?</p>