Doesn't this conflict with the consistency. If we do this with Oauth apps, then why not login?