Handle replacing OAuth sessions