RoR playing with OAuth