+ adjust priviledge for oauth.
 - remove the config of oauth.
 * rename callback to oauthcallback.