First stab at oauth, still in progress.