oauth testing framework