Fix oauth2 (for real) (#179)