hack oauth2 to make it work