correct oauth.js