kevin's lecture on oauth