dont use oauth unless set to do so