oauth fix for FIPS