oauth: fix use-after-free of the ->next of the list
Third time's the charm.
Previous attempt fixed something and broke something else. Whatever. Definitely valgrind clean this time.