experimenting with oauth