More work on oauth authentication