Separate OAuth client from API client