first oauth attempt - untested