clarifications around OAuth and timestamp