more progress with form and oauth