oauth capability