finish oauth, need to position