make the oauth security configurable and add the oauth secret and key as an option