fixes to oauth and forum xhr request handlers