testing oauth with only includes