trying redirects for oauth