add JavaScript OAuth
more flat goodness