handle pw or oauth in shop