fix(oauth): narrow context.lock scope in async_auth_flow

fix(oauth): narrow context.lock scope in async_auth_flow #2021