OAuth authentication & authorization using the API