fight the oauth tyranny