now it works, but still have to handle initial oauth better...