Loop fxa oauth

aren't we missing a bit here ?