more oauth style tweaks