OAuth query strings everywhere