oauth authentication, testing