What's the alternative of oauth/ro? Does "oauth/token" even work?