refactoring oauth