adding note on OAuth