simplify 3rd step to just using OAuth to connect new device to web application