try to transport oauth properties for plugins over session; not a very
RESTfull way (statefull!) but I think oauth requires this;