bugfix: oauth typos and omissions