updated oauth instructions