removed 'device_code' option in OAuth