change the way we do OAuth