Half of the client side OAuth