updated to handle change in shock oauth: use user name instead of email, acl url changed