update auth to work with new oauth2 package API