update to head of gtm-oauth