OAuth flow

Nope, you're right, oauth would error to our face…