@brunolemos then they need to turn off oAuth entirely. The defaults are unsafe as *hell*.