improvements to oauth process