oAuth | bscp notes