some OAuth refactoring

see CHANGELOG.md