auth/oauth: More groundwork for oauth scheme