bumped OAuth library to v0.9 (from 0.3)