oauth improvements