changed oauth flow, no more copy-paste of url