add some initial OAuth checking