This breaks the access_token object isolation (LoggedInExtension should know nothing about the OAuthExtension). I guess I'm okay with that for now.