put OAuth token setter and OAuth token state setter into locking mechani...

...sms.
good call. deprecated the "add" one and added a "set" one.