add the oauth points

These do not work, do not try them yet
add preview decorator

This will prevent users using preview features, and
warn developers if they have them enabled