separate oauth-events into own module, test