small changes to oauth