wip: stripped down for oauth