fleshing out oauth testing