Only use oauth credentials if they have been authorized. Replace existing credentials (that may not be authorized) when the login button is clicked