added missing oauth parameter in endpoints