So ... that explains why my OAuth2 requests are timing out ... now how do I put back the hair that I've pulled out?