elaborated a bit on how to handle the callback to get the final oauth tokens