make oauth configurable