allow OAuth token caching (closes #4)