use the correct oauth endpoint, way outdated