adapt new oauth api

- ensureOauth does not exist anymore, refresh is done implicitly