removed todo in oauthcontroller.java