remove getDependencies
dont throw exception is key already set
encode url
deprecate oauth provider
set scope to protected