do not enforce isown-iness for oauth grants; fix path names; fix missing functions