now Fitbit OAuth is really working (not just for the first time)