People should be using OAuth