webclient: temparary oauth config