bypass authentication and send back tokens for any properly formatted oauth POST