-Using flash instead of session.
-Using asynch for oauth authentication rather than sync response.