giving up on oauth for now