configure oauth security