put OAuth token setter and OAuth token state setter into locking mechani...

...sms.
Also, overriding a synchronized method seems potentially dangerous since the overriding method won't be synchronized.