built oauth check into admin module flag