further OAuth details