trying some non-addon sdk stuff for core.oauth