Hackish first attempt at real OAuth login