trying a different oauth approach