fixing a bug in the oauth token leak