initial pass to allow requirement of OAuth in domain-server web pages