use the correct oauth url