fitbit oauth process