path specific oauth