oauth basics, including profile done