removed legacy client-oauth dependency