update OAuth reference to 1.2.3