OAUTH works in the browser