Add oauth validation, tests