authenticate via vendor oauth access token, etc (configurable)