actually add the oauth dance for the api tests