OAuth try #3 - changed reference from Authentication model, which doesn't exist, to User model (was recycling dealtrunk code)