updated with new requirements for oauth