finished some TODOs in OAuth Implementation