question and answer about oauth