rewriting Accounts.oauth* to ExternalService.oauth*