isolated oauth controller