some progress with oauth