poking around to get oauth2 right