2-legged oauth working as well, no need to approve same app more than once