fighting the oauth fight