OAuth flow

far from stupid suggestion :+1: !