oauth headless testing using spooky, updated dependencies