Simple, chilled-out OAuth for node