OAuth connection security