have htaccess handle oauth for now