diff --git a/icons/hex/custom.png b/icons/hex/custom.png
new file mode 100644
index 0000000..232eec3
Binary files /dev/null and b/icons/hex/custom.png differ
diff --git a/login-custom.php b/login-custom.php
new file mode 100644
index 0000000..a52846f
--- /dev/null
+++ b/login-custom.php
@@ -0,0 +1,264 @@
+<?php
+
+// start the user session for maintaining individual user states during the multi-stage authentication flow:
+if (!isset($_SESSION)) {
+    session_start();
+}
+
+function add_question_mark($key) {
+		if ($key == false || rtrim($key) == '') {
+			return $key;
+		}
+
+		if( strpos($key, '?' ) !== false) {
+			return rtrim($key);
+		}
+
+		return rtrim($key) . '?';
+}
+
+# DEFINE THE OAUTH PROVIDER AND SETTINGS TO USE #
+$_SESSION['WPOA']['PROVIDER'] = 'custom';
+define('HTTP_UTIL', get_option('wpoa_http_util'));
+define('CLIENT_ENABLED', get_option('wpoa_custom_api_enabled'));
+define('CLIENT_ID', get_option('wpoa_custom_api_id'));
+define('CLIENT_SECRET', get_option('wpoa_custom_api_secret'));
+define('REDIRECT_URI', rtrim(site_url(), '/') . '/');
+define('SCOPE', get_option('wpoa_custom_api_scope'));
+define('URL_AUTH', add_question_mark(get_option('wpoa_custom_api_auth_url')));
+define('URL_TOKEN', add_question_mark(get_option('wpoa_custom_api_token_url')));
+define('URL_USER', get_option('wpoa_custom_api_user_url'));
+# END OF DEFINE THE OAUTH PROVIDER AND SETTINGS TO USE #
+
+// remember the user's last url so we can redirect them back to there after the login ends:
+if (!$_SESSION['WPOA']['LAST_URL']) {
+	// try to obtain the redirect_url from the default login page:
+	$redirect_url = esc_url($_GET['redirect_to']);
+	// if no redirect_url was found, set it to the user's last page:
+	if (!$redirect_url) {
+		$redirect_url = strtok($_SERVER['HTTP_REFERER'], "?");
+	}
+	// set the user's last page so we can return that user there after they login:
+	$_SESSION['WPOA']['LAST_URL'] = $redirect_url;
+}
+
+# AUTHENTICATION FLOW #
+// the oauth 2.0 authentication flow will start in this script and make several calls to the third-party authentication provider which in turn will make callbacks to this script that we continue to handle until the login completes with a success or failure:
+if (!CLIENT_ENABLED) {
+	$this->wpoa_end_login("This third-party authentication provider has not been enabled. Please notify the admin or try again later.");
+}
+elseif (!CLIENT_ID || !CLIENT_SECRET) {
+	// do not proceed if id or secret is null:
+	$this->wpoa_end_login("This third-party authentication provider has not been configured with an API key/secret. Please notify the admin or try again later.");
+}
+elseif (isset($_GET['error_description'])) {
+	// do not proceed if an error was detected:
+	$this->wpoa_end_login($_GET['error_description']);
+}
+elseif (isset($_GET['error_message'])) {
+	// do not proceed if an error was detected:
+	$this->wpoa_end_login($_GET['error_message']);
+}
+elseif (isset($_GET['code'])) {
+	// post-auth phase, verify the state:
+	if ($_SESSION['WPOA']['STATE'] == $_GET['state']) {
+		// get an access token from the third party provider:
+		get_oauth_token($this);
+		// get the user's third-party identity and attempt to login/register a matching wordpress user account:
+		$oauth_identity = get_oauth_identity($this);
+		$this->wpoa_login_user($oauth_identity);
+	}
+	else {
+		// possible CSRF attack, end the login with a generic message to the user and a detailed message to the admin/logs in case of abuse:
+		// TODO: report detailed message to admin/logs here...
+		$this->wpoa_end_login("Sorry, we couldn't log you in. Please notify the admin or try again later.");
+	}
+}
+else {
+	// pre-auth, start the auth process:
+	if ((empty($_SESSION['WPOA']['EXPIRES_AT'])) || (time() > $_SESSION['WPOA']['EXPIRES_AT'])) {
+		// expired token; clear the state:
+		$this->wpoa_clear_login_state();
+	}
+	get_oauth_code($this);
+}
+// we shouldn't be here, but just in case...
+$this->wpoa_end_login("Sorry, we couldn't log you in. The authentication flow terminated in an unexpected way. Please notify the admin or try again later.");
+# END OF AUTHENTICATION FLOW #
+
+# AUTHENTICATION FLOW HELPER FUNCTIONS #
+function get_oauth_code($wpoa) {
+	$params = array(
+		'response_type' => 'code',
+		'client_id' => CLIENT_ID,
+		'scope' => SCOPE,
+		'state' => uniqid('', true),
+		'redirect_uri' => REDIRECT_URI,
+	);
+	$_SESSION['WPOA']['STATE'] = $params['state'];
+	$url = URL_AUTH . http_build_query($params);
+	header("Location: $url");
+	exit;
+}
+
+function get_oauth_token($wpoa) {
+	$params = array(
+		'grant_type' => 'authorization_code',
+		'client_id' => CLIENT_ID,
+		'client_secret' => CLIENT_SECRET,
+		'code' => $_GET['code'],
+		'redirect_uri' => REDIRECT_URI,
+	);
+	$url_params = http_build_query($params);
+	switch (strtolower(HTTP_UTIL)) {
+		case 'curl':
+			$url = URL_TOKEN;
+
+			$response = wp_remote_post(
+				$url, array(
+					'body' => $params,
+					'sslverify' => get_option('wpoa_http_util_verify_ssl')
+				)
+			);
+
+			if ( is_wp_error( $response ) ) {
+			   $error_message = $response->get_error_message();
+				 error_log("token failed retrival - " . $result);
+
+			   $wpoa->wpoa_end_login( $error_message );
+				 return false;
+			}
+
+			$result = $response['body'];
+
+			break;
+		case 'stream-context':
+			$url = rtrim(URL_TOKEN, "?");
+			$opts = array('http' =>
+				array(
+					'method'  => 'POST',
+					'header'  => 'Content-type: application/x-www-form-urlencoded',
+					'content' => $url_params,
+				)
+			);
+			$context = $context  = stream_context_create($opts);
+			$result = @file_get_contents($url, false, $context);
+			if ($result === false) {
+				$wpoa->wpoa_end_login("Sorry, we couldn't log you in. Could not retrieve access token via stream context. Please notify the admin or try again later.");
+			}
+			break;
+	}
+	// parse the result:
+	$result_obj = json_decode($result, false, 512); // PROVIDER SPECIFIC: Google encodes the access token result as json by default
+	$access_token = $result_obj->access_token; // PROVIDER SPECIFIC: this is how Google returns the access token KEEP THIS PROTECTED!
+
+	$expires_in = $result_obj->expires_in; // PROVIDER SPECIFIC: this is how Google returns the access token's expiration
+	$expires_at = time() + $expires_in;
+	// handle the result:
+	if (!$access_token || !$expires_in) {
+		// malformed access token result detected:
+		$wpoa->wpoa_end_login("Sorry, we couldn't log you in. Malformed access token result detected. Please notify the admin or try again later.");
+	}
+	else {
+		$_SESSION['WPOA']['ACCESS_TOKEN'] = $access_token;
+		$_SESSION['WPOA']['EXPIRES_IN'] = $expires_in;
+		$_SESSION['WPOA']['EXPIRES_AT'] = $expires_at;
+		return true;
+	}
+}
+
+function get_oauth_identity($wpoa) {
+	// here we exchange the access token for the user info...
+	// set the access token param:
+	$params = array(
+		'access_token' => $_SESSION['WPOA']['ACCESS_TOKEN'], // PROVIDER SPECIFIC: the access_token is passed to Google via POST param
+	);
+	$url_params = http_build_query($params);
+	$result = "";
+	// perform the http request:
+	switch (strtolower(HTTP_UTIL)) {
+		case 'curl':
+			$url = URL_USER;
+
+			$response = wp_remote_get(
+				$url,
+				array(
+					'headers' => array(
+						'Authorization' => 'Bearer ' . $_SESSION['WPOA']['ACCESS_TOKEN']
+					)
+				)
+			);
+
+			if ( is_wp_error( $response ) ) {
+			   $error_message = $response->get_error_message();
+				 error_log("userinfo failed retrival - " . $result);
+
+			   $wpoa->wpoa_end_login( $error_message );
+				 return false;
+			}
+
+			$result = $response['body'];
+
+			$result_obj = json_decode($result, true);
+			break;
+		case 'stream-context':
+			$url = rtrim(URL_USER, "?");
+			$opts = array('http' =>
+				array(
+					'method'  => 'GET',
+					// PROVIDER NORMALIZATION: Reddit/Github User-Agent
+					'header'  => "Authorization: Bearer " . $_SESSION['WPOA']['ACCESS_TOKEN'] . "\r\n" . "x-li-format: json\r\n", // PROVIDER SPECIFIC: i think only LinkedIn uses x-li-format...
+				)
+			);
+			$context = $context  = stream_context_create($opts);
+			$result = @file_get_contents($url, false, $context);
+			if ($result === false) {
+				$wpoa->wpoa_end_login("Sorry, we couldn't log you in. Could not retrieve user identity via stream context. Please notify the admin or try again later.");
+			}
+			$result_obj = json_decode($result, true);
+			break;
+	}
+	// parse and return the user's oauth identity:
+	$oauth_identity = array();
+	$oauth_identity['provider'] = $_SESSION['WPOA']['PROVIDER'];
+	/*
+	Response example from Keycloack
+	{
+	  "name": "Admin User",
+	  "sub": "88dd0538-5f32-4222-af07-efe5cd809038",
+	  "preferred_username": "admin@example.com",
+	  "given_name": "Admin",
+	  "family_name": "User",
+	  "email": "admin@example.com"
+	}
+	{
+		"error_description":"Token invalid: Token audience doesn't match domain. Token ....",
+		"error":"invalid_grant"
+	}
+	*/
+	// Check if we got an error message
+	if( isset($result_obj["error"]) || strlen($result_obj["error"]) > 0 ) {
+		$message = strlen($result_obj["error_description"]) > 0 ? $result_obj["error_description"] : $result_obj["error"];
+		$wpoa->wpoa_end_login("Sorry, we could not log you in. " . $message);
+		return $oauth_identity;
+	}
+
+	$objtype = get_option('wpoa_custom_api_identity_id');
+	if ($objtype == null || $objtype == false || $objtype == '') {
+		$objtype = 'id';
+	}
+	$oauth_identity['id'] = $result_obj[$objtype];
+	$objtype = get_option('wpoa_custom_api_identity_preferred_username');
+	if ($objtype == null || $objtype == false || $objtype == '') {
+		$objtype = 'preferred_username';
+	}
+	$oauth_identity['preferred_username'] = $result_obj[$objtype];
+
+	if (!$oauth_identity['id']) {
+		// $wpoa->wpoa_end_login("Sorry, we couldn't log you in. User identity was not found: " . $_SESSION['WPOA']['ACCESS_TOKEN']);
+		$wpoa->wpoa_end_login("Sorry, we could not log you in. User identity '" . $objtype . "' was not found. Please notify the admin or try again later.");
+	}
+	return $oauth_identity;
+}
+# END OF AUTHENTICATION FLOW HELPER FUNCTIONS #
+?>
diff --git a/register.php b/register.php
index d3a93a8..aa983c7 100644
--- a/register.php
+++ b/register.php
@@ -1 +1 @@
-<?php

// TODO: very important that we sanitize all $_POST variables here before using them!
// TODO: this doesn't call wpoa_end_login() which might result in the LAST_URL not being cleared...

global $wpdb;

// initiate the user session:
session_start();

// prevent users from registering if the option is turned off in the dashboard:
if (!get_option("users_can_register")) {
	$_SESSION["WPOA"]["RESULT"] = "Sorry, user registration is disabled at this time. Your account could not be registered. Please notify the admin or try again later.";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]);
	exit;
}

// registration was initiated from an oauth provider, set the username and password automatically.
if ($_SESSION["WPOA"]["USER_ID"] != "") {
	$username = uniqid('', true);
	$password = wp_generate_password();
}

// registration was initiated from the standard sign up form, set the username and password that was requested by the user.
if ( $_SESSION["WPOA"]["USER_ID"] == "" ) {
	// this registration was initiated from the standard Registration page, create account and login the user automatically
	$username = $_POST['identity'];
	$password = $_POST['password'];
}

// now attempt to generate the user and get the user id:
$user_id = wp_create_user( $username, $password, $username ); // we use wp_create_user instead of wp_insert_user so we can handle the error when the user being registered already exists

// check if the user was actually created:
if (is_wp_error($user_id)) {
	// there was an error during registration, redirect and notify the user:
	$_SESSION["WPOA"]["RESULT"] = $user_id->get_error_message();
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]);
	exit;
}

// now try to update the username to something more permanent and recognizable:
$username = "user" . $user_id;
$update_username_result = $wpdb->update($wpdb->users, array('user_login' => $username, 'user_nicename' => $username, 'display_name' => $username), array('ID' => $user_id));
$update_nickname_result = update_user_meta($user_id, 'nickname', $username);

// apply the custom default user role:
$role = get_option('wpoa_new_user_role');
$update_role_result = wp_update_user(array('ID' => $user_id, 'role' => $role));

// proceed if no errors were detected:
if ($update_username_result == false || $update_nickname_result == false) {
	// there was an error during registration, redirect and notify the user:
	$_SESSION["WPOA"]["RESULT"] = "Could not rename the username during registration. Please contact an admin or try again later.";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]); exit;
}
elseif ($update_role_result == false) {
	// there was an error during registration, redirect and notify the user:
	$_SESSION["WPOA"]["RESULT"] = "Could not assign default user role during registration. Please contact an admin or try again later.";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]); exit;
}
else {
	// registration was successful, the user account was created, proceed to login the user automatically...
	// associate the wordpress user account with the now-authenticated third party account:
	$this->wpoa_link_account($user_id);
	// attempt to login the new user (this could be error prone):
	$creds = array();
	$creds['user_login'] = $username;
	$creds['user_password'] = $password;
	$creds['remember'] = true;
	$user = wp_signon( $creds, false );
	// send a notification e-mail to the admin and the new user (we can also build our own email if necessary):
	if (!get_option('wpoa_suppress_welcome_email')) {
		//wp_mail($username, "New User Registration", "Thank you for registering!\r\nYour username: " . $username . "\r\nYour password: " . $password, $headers);
		wp_new_user_notification( $user_id, $password );
	}
	// finally redirect the user back to the page they were on and notify them of successful registration:
	$_SESSION["WPOA"]["RESULT"] = "You have been registered successfully!";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]); exit;
}
?>
\ No newline at end of file
+<?php

// TODO: very important that we sanitize all $_POST variables here before using them!
// TODO: this doesn't call wpoa_end_login() which might result in the LAST_URL not being cleared...

global $wpdb;

// initiate the user session:
session_start();

// prevent users from registering if the option is turned off in the dashboard:
if (!get_option("users_can_register")) {
	$_SESSION["WPOA"]["RESULT"] = "Sorry, user registration is disabled at this time. Your account could not be registered. Please notify the admin or try again later.";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]);
	exit;
}

// registration was initiated from an oauth provider, set the username and password automatically.
if ($_SESSION["WPOA"]["USER_ID"] != "") {
	$username = $_SESSION["WPOA"]["PREFERRED_USERNAME"];
	if($username == false || $username == null || $username == '') {
		$username = uniqid('', true);
	}
	$password = wp_generate_password();
}

// registration was initiated from the standard sign up form, set the username and password that was requested by the user.
if ( $_SESSION["WPOA"]["USER_ID"] == "" ) {
	// this registration was initiated from the standard Registration page, create account and login the user automatically
	$username = $_POST['identity'];
	$password = $_POST['password'];
}

// now attempt to generate the user and get the user id:
$user_id = wp_create_user( $username, $password, $username ); // we use wp_create_user instead of wp_insert_user so we can handle the error when the user being registered already exists

// check if the user was actually created:
if (is_wp_error($user_id)) {
	// there was an error during registration, redirect and notify the user:
	$_SESSION["WPOA"]["RESULT"] = $user_id->get_error_message();
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]);
	exit;
}

// now try to update the username to something more permanent and recognizable:
$username = "user" . $user_id;
$update_username_result = $wpdb->update($wpdb->users, array('user_login' => $username, 'user_nicename' => $username, 'display_name' => $username), array('ID' => $user_id));
$update_nickname_result = update_user_meta($user_id, 'nickname', $username);

// apply the custom default user role:
$role = get_option('wpoa_new_user_role');
$update_role_result = wp_update_user(array('ID' => $user_id, 'role' => $role));

// proceed if no errors were detected:
if ($update_username_result == false || $update_nickname_result == false) {
	// there was an error during registration, redirect and notify the user:
	$_SESSION["WPOA"]["RESULT"] = "Could not rename the username during registration. Please contact an admin or try again later.";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]); exit;
}
elseif ($update_role_result == false) {
	// there was an error during registration, redirect and notify the user:
	$_SESSION["WPOA"]["RESULT"] = "Could not assign default user role during registration. Please contact an admin or try again later.";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]); exit;
}
else {
	// registration was successful, the user account was created, proceed to login the user automatically...
	// associate the wordpress user account with the now-authenticated third party account:
	$this->wpoa_link_account($user_id);
	// attempt to login the new user (this could be error prone):
	$creds = array();
	$creds['user_login'] = $username;
	$creds['user_password'] = $password;
	$creds['remember'] = true;
	$user = wp_signon( $creds, false );
	// send a notification e-mail to the admin and the new user (we can also build our own email if necessary):
	if (!get_option('wpoa_suppress_welcome_email')) {
		//wp_mail($username, "New User Registration", "Thank you for registering!\r\nYour username: " . $username . "\r\nYour password: " . $password, $headers);
		wp_new_user_notification( $user_id, $password );
	}
	// finally redirect the user back to the page they were on and notify them of successful registration:
	$_SESSION["WPOA"]["RESULT"] = "You have been registered successfully!";
	header("Location: " . $_SESSION["WPOA"]["LAST_URL"]); exit;
}
?>
\ No newline at end of file
diff --git a/wp-oauth-settings.php b/wp-oauth-settings.php
index 0e34fa3..b5ef807 100644
--- a/wp-oauth-settings.php
+++ b/wp-oauth-settings.php
@@ -20,7 +20,7 @@ function wpoa_cc_security() {
 		$points_max = 6;
 		return floor(($points / $points_max) * 100);
 	}
-	
+
 	// config check privacy
 	function wpoa_cc_privacy() {
 		$points = 0;
@@ -31,7 +31,7 @@ function wpoa_cc_privacy() {
 		$points_max = 1;
 		return floor(($points / $points_max) * 100);
 	}
-	
+
 	// config check user experience
 	function wpoa_cc_ux() {
 		$points = 0;
@@ -44,7 +44,7 @@ function wpoa_cc_ux() {
 		$points_max = 2;
 		return floor(($points / $points_max) * 100);
 	}
-	
+
 	// cache the config check ratings:
 	$cc_security = wpoa_cc_security();
 	$cc_privacy = wpoa_cc_privacy();
@@ -75,10 +75,10 @@ function wpoa_cc_ux() {
 		<div id="wpoa-settings-section-news" class="wpoa-settings-section">
 			<h3>News</h3>
 			<div class='form-padding'>
-				<?php 
+				<?php
 				$rss = fetch_feed("http://glassocean.net/tag/wp-oauth/feed/");
 				if (!is_wp_error($rss)) {
-					$maxitems = $rss->get_item_quantity(5); 
+					$maxitems = $rss->get_item_quantity(5);
 					$rss_items = $rss->get_items(0, $maxitems);
 				}
 				?>
@@ -177,7 +177,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Shows a short-lived notification message to the user which indicates whether or not the login was successful, and if there was an error.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Login redirects to: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -194,7 +194,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Specifies where to redirect a user after they log in.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Logout redirects to: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -212,7 +212,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Specifies where to redirect a user after they log out.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Automatically logout inactive users: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -235,19 +235,19 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END General Settings section -->
-			
+
 			<!-- START Login Page & Form Customization section -->
 			<div id="wpoa-settings-section-login-forms" class="wpoa-settings-section">
 			<h3>Login Forms</h3>
 			<div class='form-padding'>
 			<table class='form-table'>
-				
+
 				<tr valign='top'>
 				<th colspan="2">
 					<h4>Default Login Form / Page / Popup</h4>
 				</th>
 				</td>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Hide the WordPress login form: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -256,7 +256,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message tip-warning"><strong>Warning: </strong>Hiding the WordPress login form may prevent you from being able to login. If you normally rely on this method, DO NOT enable this setting. Furthermore, please make sure your login provider(s) are active and working BEFORE enabling this setting.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Logo links to site: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -264,7 +264,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Forces the logo image on the login form to link to your site instead of WordPress.org.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Logo image: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -275,7 +275,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Changes the default WordPress logo on the login form to an image of your choice. You may select an image from the Media Library, or specify a custom URL.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Background image: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -286,13 +286,13 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Changes the background on the login form to an image of your choice. You may select an image from the Media Library, or specify a custom URL.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th colspan="2">
 					<h4>Custom Login Forms</h4>
 				</th>
 				</td>
-			
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Custom form to show on the login screen: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -300,7 +300,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Create or manage these login form designs in the CUSTOM LOGIN FORM DESIGNS section.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Custom form to show on the user's profile page: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -308,7 +308,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Create or manage these login form designs in the CUSTOM LOGIN FORM DESIGNS section.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Custom form to show in the comments section: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -342,14 +342,14 @@ function wpoa_cc_ux() {
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
-			
+
 			<table class="form-table" id="wpoa-login-form-design-form">
 				<tr valign='top'>
 				<th colspan="2">
 					<h4>Edit Design</h4>
 				</th>
 				</td>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Design name: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -357,7 +357,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Sets the name to use for this design.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Icon set: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -368,7 +368,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Specifies which icon set to use for displaying provider icons on the login buttons.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Show login buttons: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -380,7 +380,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Determines when the login buttons should be shown.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Show logout button: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -392,7 +392,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Determines when the logout button should be shown.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Layout: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -405,7 +405,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Sets vertical or horizontal layout for the buttons.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Login button prefix: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -413,7 +413,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Sets the text prefix to be displayed on the social login buttons.</p>
 				</td>
 				</tr>
-			
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Logged out title: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -421,7 +421,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Sets the text to be displayed above the login form for logged out users.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Logged in title: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -429,7 +429,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Sets the text to be displayed above the login form for logged in users.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Logging in title: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -437,7 +437,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Sets the text to be displayed above the login form for users who are logging in.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Logging out title: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -445,14 +445,14 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Sets the text to be displayed above the login form for users who are logging out.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' id='wpoa-login-form-actions'>
 				<th scope='row'>
 					<input type="button" id="wpoa-login-form-ok" name="wpoa_login_form_ok" class="button" value="OK">
 					<input type="button" id="wpoa-login-form-cancel" name="wpoa_login_form_cancel" class="button" value="Cancel">
 				</th>
 				<td>
-					
+
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -460,7 +460,7 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Login Buttons section -->
-			
+
 			<!-- START User Registration section -->
 			<div id="wpoa-settings-section-user-registration" class="wpoa-settings-section">
 			<h3>User Registration</h3>
@@ -473,7 +473,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Prevents WordPress from sending an email to newly registered users by default, which contains their username and password.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Assign new users to the following role: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -481,12 +481,26 @@ function wpoa_cc_ux() {
 					<p class="tip-message">Specifies what user role will be assigned to newly registered users.</p>
 				</td>
 				</tr>
+
+				<tr valign='top' class="has-tip">
+				<th scope='row'>Link new users to the following WordPress user: <a href="#" class="tip-button">[?]</a></th>
+				<td>
+					<?php wp_dropdown_users(array(
+						'selected' => get_option('wpoa_new_user'),
+						'include_selected' => true,
+						'show_option_none' => '- disable -',
+						'name' => 'wpoa_new_user'
+					)); ?>
+					<p class="tip-message">If you disable registrations on your web site, you can link all new users to the same WordPress user this way. If you deselect this option, a new user will be created for every 3<sup>rd</sup>-party login.</p>
+				</td>
+				</tr>
+
 			</table> <!-- .form-table -->
 			<?php submit_button('Save all settings'); ?>
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END User Registration section -->
-			
+
 			<!-- START Login with Google section -->
 			<div id="wpoa-settings-section-login-with-google" class="wpoa-settings-section">
 			<h3>Login with Google</h3>
@@ -498,18 +512,18 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_google_api_enabled' value='1' <?php checked(get_option('wpoa_google_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Client ID:</th>
 				<td>
-					<input type='text' name='wpoa_google_api_id' value='<?php echo get_option('wpoa_google_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_google_api_id' value='<?php echo get_option('wpoa_google_api_id'); ?>' />
 				</td>
 				</tr>
 
 				<tr valign='top'>
 				<th scope='row'>Client Secret:</th>
 				<td>
-					<input type='text' name='wpoa_google_api_secret' value='<?php echo get_option('wpoa_google_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_google_api_secret' value='<?php echo get_option('wpoa_google_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -539,32 +553,32 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_oauth_server_api_enabled' value='1' <?php checked(get_option('wpoa_oauth_server_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Client ID:</th>
 				<td>
-					<input type='text' name='wpoa_oauth_server_api_id' value='<?php echo get_option('wpoa_oauth_server_api_id'); ?>' />
+					<input style="width: 100%" ='text' name='wpoa_oauth_server_api_id' value='<?php echo get_option('wpoa_oauth_server_api_id'); ?>' />
 				</td>
 				</tr>
 
 				<tr valign='top'>
 				<th scope='row'>Client Secret:</th>
 				<td>
-					<input type='text' name='wpoa_oauth_server_api_secret' value='<?php echo get_option('wpoa_oauth_server_api_secret'); ?>' />
+					<input style="width: 100%" ='text' name='wpoa_oauth_server_api_secret' value='<?php echo get_option('wpoa_oauth_server_api_secret'); ?>' />
 				</td>
 				</tr>
 
 				<tr valign='top'>
 				<th scope='row'>OAuth Server Endpoint:</th>
 				<td>
-					<input type='text' name='wpoa_oauth_server_api_endpoint' value='<?php echo get_option('wpoa_oauth_server_api_endpoint'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_oauth_server_api_endpoint' value='<?php echo get_option('wpoa_oauth_server_api_endpoint'); ?>' />
 				</td>
 				</tr>
 
 				<tr valign='top'>
 				<th scope='row'>Login Button Text:</th>
 				<td>
-					<input type='text' name='wpoa_oauth_server_api_button_text' value='<?php echo get_option('wpoa_oauth_server_api_button_text'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_oauth_server_api_button_text' value='<?php echo get_option('wpoa_oauth_server_api_button_text'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -583,7 +597,7 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Login with Google section -->
-			
+
 			<!-- START Login with Facebook section -->
 			<div id="wpoa-settings-section-login-with-facebook" class="wpoa-settings-section">
 			<h3>Login with Facebook</h3>
@@ -595,18 +609,18 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_facebook_api_enabled' value='1' <?php checked(get_option('wpoa_facebook_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>App ID:</th>
 				<td>
-					<input type='text' name='wpoa_facebook_api_id' value='<?php echo get_option('wpoa_facebook_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_facebook_api_id' value='<?php echo get_option('wpoa_facebook_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>App Secret:</th>
 				<td>
-					<input type='text' name='wpoa_facebook_api_secret' value='<?php echo get_option('wpoa_facebook_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_facebook_api_secret' value='<?php echo get_option('wpoa_facebook_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -623,7 +637,7 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Login with Facebook section -->
-			
+
 			<!-- START Login with LinkedIn section -->
 			<div id="wpoa-settings-section-login-with-linkedin" class="wpoa-settings-section">
 			<h3>Login with LinkedIn</h3>
@@ -635,18 +649,18 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_linkedin_api_enabled' value='1' <?php checked(get_option('wpoa_linkedin_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>API Key:</th>
 				<td>
-					<input type='text' name='wpoa_linkedin_api_id' value='<?php echo get_option('wpoa_linkedin_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_linkedin_api_id' value='<?php echo get_option('wpoa_linkedin_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>Secret Key:</th>
 				<td>
-					<input type='text' name='wpoa_linkedin_api_secret' value='<?php echo get_option('wpoa_linkedin_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_linkedin_api_secret' value='<?php echo get_option('wpoa_linkedin_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -663,7 +677,7 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Login with LinkedIn section -->
-			
+
 			<!-- START Login with Github section -->
 			<div id="wpoa-settings-section-login-with-github" class="wpoa-settings-section">
 			<h3>Login with Github</h3>
@@ -675,18 +689,18 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_github_api_enabled' value='1' <?php checked(get_option('wpoa_github_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Client ID:</th>
 				<td>
-					<input type='text' name='wpoa_github_api_id' value='<?php echo get_option('wpoa_github_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_github_api_id' value='<?php echo get_option('wpoa_github_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>Client Secret:</th>
 				<td>
-					<input type='text' name='wpoa_github_api_secret' value='<?php echo get_option('wpoa_github_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_github_api_secret' value='<?php echo get_option('wpoa_github_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -719,14 +733,14 @@ function wpoa_cc_ux() {
 						<tr valign='top'>
 							<th scope='row'>Client ID:</th>
 							<td>
-								<input type='text' name='wpoa_itembase_api_id' value='<?php echo get_option('wpoa_itembase_api_id'); ?>' />
+								<input style="width: 100%" type='text' name='wpoa_itembase_api_id' value='<?php echo get_option('wpoa_itembase_api_id'); ?>' />
 							</td>
 						</tr>
 
 						<tr valign='top'>
 							<th scope='row'>Client Secret:</th>
 							<td>
-								<input type='text' name='wpoa_itembase_api_secret' value='<?php echo get_option('wpoa_itembase_api_secret'); ?>' />
+								<input style="width: 100%" type='text' name='wpoa_itembase_api_secret' value='<?php echo get_option('wpoa_itembase_api_secret'); ?>' />
 							</td>
 						</tr>
 					</table> <!-- .form-table -->
@@ -742,7 +756,7 @@ function wpoa_cc_ux() {
 				</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Login with itembase section -->
-			
+
 			<!-- START Login with Reddit section -->
 			<div id="wpoa-settings-section-login-with-reddit" class="wpoa-settings-section">
 			<h3>Login with Reddit</h3>
@@ -754,18 +768,18 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_reddit_api_enabled' value='1' <?php checked(get_option('wpoa_reddit_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Client ID:</th>
 				<td>
-					<input type='text' name='wpoa_reddit_api_id' value='<?php echo get_option('wpoa_reddit_api_id'); ?>' />
+					<input style="width: 100%" ='text' name='wpoa_reddit_api_id' value='<?php echo get_option('wpoa_reddit_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>Client Secret:</th>
 				<td>
-					<input type='text' name='wpoa_reddit_api_secret' value='<?php echo get_option('wpoa_reddit_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_reddit_api_secret' value='<?php echo get_option('wpoa_reddit_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -782,7 +796,7 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Login with Reddit section -->
-			
+
 			<!-- START Login with Windows Live section -->
 			<div id="wpoa-settings-section-login-with-windowslive" class="wpoa-settings-section">
 			<h3>Login with Windows Live</h3>
@@ -794,18 +808,18 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_windowslive_api_enabled' value='1' <?php checked(get_option('wpoa_windowslive_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Client ID:</th>
 				<td>
-					<input type='text' name='wpoa_windowslive_api_id' value='<?php echo get_option('wpoa_windowslive_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_windowslive_api_id' value='<?php echo get_option('wpoa_windowslive_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>Client Secret:</th>
 				<td>
-					<input type='text' name='wpoa_windowslive_api_secret' value='<?php echo get_option('wpoa_windowslive_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_windowslive_api_secret' value='<?php echo get_option('wpoa_windowslive_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -834,7 +848,7 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_paypal_api_enabled' value='1' <?php checked(get_option('wpoa_paypal_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Sandbox mode:</th>
 				<td>
@@ -842,18 +856,18 @@ function wpoa_cc_ux() {
 					<p class="tip-message">PayPal offers a sandbox mode for developers who wish to setup and test PayPal Login with their site before going live.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Client ID:</th>
 				<td>
-					<input type='text' name='wpoa_paypal_api_id' value='<?php echo get_option('wpoa_paypal_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_paypal_api_id' value='<?php echo get_option('wpoa_paypal_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>Client Secret:</th>
 				<td>
-					<input type='text' name='wpoa_paypal_api_secret' value='<?php echo get_option('wpoa_paypal_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_paypal_api_secret' value='<?php echo get_option('wpoa_paypal_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -884,18 +898,18 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_instagram_api_enabled' value='1' <?php checked(get_option('wpoa_instagram_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Client ID:</th>
 				<td>
-					<input type='text' name='wpoa_instagram_api_id' value='<?php echo get_option('wpoa_instagram_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_instagram_api_id' value='<?php echo get_option('wpoa_instagram_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>Client Secret:</th>
 				<td>
-					<input type='text' name='wpoa_instagram_api_secret' value='<?php echo get_option('wpoa_instagram_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_instagram_api_secret' value='<?php echo get_option('wpoa_instagram_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
@@ -930,22 +944,22 @@ function wpoa_cc_ux() {
 					<input type='checkbox' name='wpoa_battlenet_api_enabled' value='1' <?php checked(get_option('wpoa_battlenet_api_enabled') == 1); ?> />
 				</td>
 				</tr>
-				
+
 				<tr valign='top'>
 				<th scope='row'>Key:</th>
 				<td>
-					<input type='text' name='wpoa_battlenet_api_id' value='<?php echo get_option('wpoa_battlenet_api_id'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_battlenet_api_id' value='<?php echo get_option('wpoa_battlenet_api_id'); ?>' />
 				</td>
 				</tr>
-				 
+
 				<tr valign='top'>
 				<th scope='row'>Secret:</th>
 				<td>
-					<input type='text' name='wpoa_battlenet_api_secret' value='<?php echo get_option('wpoa_battlenet_api_secret'); ?>' />
+					<input style="width: 100%" type='text' name='wpoa_battlenet_api_secret' value='<?php echo get_option('wpoa_battlenet_api_secret'); ?>' />
 				</td>
 				</tr>
 			</table> <!-- .form-table -->
-			
+
 			<p>
 				<strong>Instructions:</strong>
 				<ol>
@@ -966,7 +980,96 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Login with Battle.net section -->
-			
+
+			<!-- START Login with Custom OAuth provider section -->
+			<div id="wpoa-settings-section-login-with-custom" class="wpoa-settings-section">
+			<h3>Login with a custom OAuth2 provider</h3>
+			<div class='form-padding'>
+			<table class='form-table'>
+				<tr valign='top'>
+				<th scope='row'>Enabled:</th>
+				<td>
+					<input type='checkbox' name='wpoa_custom_api_enabled' value='1' <?php checked(get_option('wpoa_custom_api_enabled') == 1); ?> />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>Client ID:</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_id' value='<?php echo get_option('wpoa_custom_api_id'); ?>' />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>Secret:</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_secret' value='<?php echo get_option('wpoa_custom_api_secret'); ?>' />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>Scopes:</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_scope' value='<?php echo get_option('wpoa_custom_api_scope'); ?>' />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>Authentication URL:</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_auth_url' value='<?php echo get_option('wpoa_custom_api_auth_url'); ?>' />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>Token URL:</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_token_url' value='<?php echo get_option('wpoa_custom_api_token_url'); ?>' />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>User URL:</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_user_url' value='<?php echo get_option('wpoa_custom_api_user_url'); ?>' />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>UserInfo element for unique ID (usually 'id' or 'username'):</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_identity_id' value='<?php echo get_option('wpoa_custom_api_identity_id'); ?>' />
+				</td>
+				</tr>
+
+				<tr valign='top'>
+				<th scope='row'>UserInfo element for preffered username (usually 'username' or 'preferred_username'):</th>
+				<td>
+					<input style="width: 100%" type='text' name='wpoa_custom_api_identity_preferred_username' value='<?php echo get_option('wpoa_custom_api_identity_preferred_username'); ?>' />
+				</td>
+				</tr>
+
+			</table> <!-- .form-table -->
+
+			<p>
+				<strong>Instructions:</strong>
+				<ol>
+					<li>Install a 3<sup>rd</sup>-party OAuth server, such as <a href="http://www.keycloak.org/">KeyCloack</a></li>
+					<li>Check for <em>authentication url</em>, <em>token URL</em> and <em>user url</em>. For Keycloack find them at <tt>https://<em>your-domain</em>/auth/realms/<em>your-realm</em>/.well-known/openid-configuration</tt></li>
+					<li>Enter details provided by your OAuth server into the input fields above.</li>
+				</ol>
+				<strong>References:</strong>
+				<ul>
+					<li><a href='https://keycloak.gitbooks.io/authorization-services-guide/content/v/2.1/topics/service/overview.html' target='_blank'>Keycloack authorization Services</a></li>
+					<li><a href='http://oauth.net/' target='_blank'>OAuth website</a></li>
+				</ul>
+			</p>
+			<?php submit_button('Save all settings'); ?>
+			</div> <!-- .form-padding -->
+			</div> <!-- .wpoa-settings-section -->
+			<!-- END Login with Custom section -->
+
+
 			<!-- START Back Channel Configuration section -->
 			<div id="wpoa-settings-section-back-channel=configuration" class="wpoa-settings-section">
 			<h3>Back Channel Configuration</h3>
@@ -977,13 +1080,13 @@ function wpoa_cc_ux() {
 				<th scope='row'>HTTP utility: <a href="#" class="tip-button">[?]</a></th>
 				<td>
 					<select name='wpoa_http_util'>
-						<option value='curl' <?php selected(get_option('wpoa_http_util'), 'curl'); ?>>cURL</option>
+						<option value='curl' <?php selected(get_option('wpoa_http_util'), 'curl'); ?>>cURL / wp_remote_get</option>
 						<option value='stream-context' <?php selected(get_option('wpoa_http_util'), 'stream-context'); ?>>Stream Context</option>
 					</select>
 					<p class="tip-message">The method used by the web server for performing HTTP requests to the third-party providers. Most servers support cURL, but some servers may require Stream Context instead.</p>
 				</td>
 				</tr>
-				
+
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Verify Peer/Host SSL Certificates: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -997,10 +1100,10 @@ function wpoa_cc_ux() {
 			</div> <!-- .form-padding -->
 			</div> <!-- .wpoa-settings-section -->
 			<!-- END Back Channel Configuration section -->
-			
+
 			<!-- START Maintenance & Troubleshooting section -->
 			<div id="wpoa-settings-section-maintenance-troubleshooting" class="wpoa-settings-section">
-			<h3>Maintenance & Troubleshooting</h3>
+			<h3>Maintenance &amp; Troubleshooting</h3>
 			<div class='form-padding'>
 			<table class='form-table'>
 				<tr valign='top' class="has-tip">
@@ -1010,7 +1113,7 @@ function wpoa_cc_ux() {
 					<p class="tip-message"><strong>Instructions:</strong> Check the box above, click the Save all settings button, and the settings will be restored to default.</p>
 					<p class="tip-message tip-warning"><strong>Warning:</strong> This will restore the default settings, erasing any API keys/secrets that you may have entered above.</p>
 				</td>
-				</tr>		
+				</tr>
 				<tr valign='top' class="has-tip">
 				<th scope='row'>Delete settings on uninstall: <a href="#" class="tip-button">[?]</a></th>
 				<td>
@@ -1029,4 +1132,4 @@ function wpoa_cc_ux() {
 	<!-- END Settings Column 1 -->
 	</div> <!-- #wpoa-settings-body -->
 	<!-- END Settings Body -->
-</div> <!-- .wrap .wpoa-settings -->
\ No newline at end of file
+</div> <!-- .wrap .wpoa-settings -->
diff --git a/wp-oauth.php b/wp-oauth.php
index d353e8c..fca6805 100644
--- a/wp-oauth.php
+++ b/wp-oauth.php
@@ -4,7 +4,7 @@
 Plugin Name: WP-OAuth
 Plugin URI: http://github.com/perrybutler/wp-oauth
 Description: A WordPress plugin that allows users to login or register by authenticating with an existing Google, Facebook, LinkedIn, Github, Reddit or Windows Live account via OAuth 2.0. Easily drops into new or existing sites, integrates with existing users.
-Version: 0.4.1
+Version: 0.4.1.1
 Author: Perry Butler
 Author URI: http://glassocean.net
 License: GPL2
@@ -23,8 +23,21 @@
 	// ==============
 
 	// set a version that we can use for performing plugin updates, this should always match the plugin version:
-	const PLUGIN_VERSION = "0.4.1";
-	
+	const PLUGIN_VERSION = "0.4.1.1";
+	static $WPOA_LOGIN_PROVIDERS = array(
+		"google" => "Google",
+		"facebook" => "Facebook",
+		"linkedin" => "LinkedIn",
+		"github" => "GitHub",
+		"itembase" => "itembase",
+		"reddit" => "Reddit",
+		"windowslive" => "Windows Live",
+		"paypal" => "PayPal",
+		"instagram" => "Instagram",
+		"battlenet" => "Battlenet",
+		"custom" => "Other"
+	);
+
 	// singleton class pattern:
 	protected static $instance = NULL;
 	public static function get_instance() {
@@ -81,6 +94,7 @@ public static function get_instance() {
 			),
 		'wpoa_suppress_welcome_email' => 0,								// 0, 1
 		'wpoa_new_user_role' => 'contributor',							// role
+		'wpoa_new_user' => null,											// default new user
 		'wpoa_google_api_enabled' => 0,									// 0, 1
 		'wpoa_google_api_id' => '',										// any string
 		'wpoa_google_api_secret' => '',									// any string
@@ -111,20 +125,27 @@ public static function get_instance() {
 		'wpoa_instagram_api_secret' => '',								// any string
 		'wpoa_battlenet_api_enabled' => 0,								// 0, 1
 		'wpoa_battlenet_api_id' => '',									// any string
-		'wpoa_battlenet_api_secret' => '',
-																		// any string
+		'wpoa_battlenet_api_secret' => '',							// any string
+		'wpoa_custom_api_enabled' => 0,								// 0, 1
+		'wpoa_custom_api_id' => '',									// any string
+		'wpoa_custom_api_secret' => '',							// any string
+		'wpoa_custom_api_scope' => '',							// any string
+		'wpoa_custom_api_auth_url' => '',							// any string
+		'wpoa_custom_api_token_url' => '',							// any string
+		'wpoa_custom_api_user_url' => '',							// any string
+		'wpoa_custom_api_identity_id' => '',							// any string
+		'wpoa_custom_api_identity_preferred_username' => '',							// any string
 		'wpoa_oauth_server_api_enabled' => 0,							// 0, 1
 		'wpoa_oauth_server_api_id' => '',								// any string
 		'wpoa_oauth_server_api_secret' => '',							// any string
 		'wpoa_oauth_server_api_endpoint' => '',							// any string
 		'wpoa_oauth_server_api_button_text' => '',						// any string
-
 		'wpoa_http_util' => 'curl',										// curl, stream-context
 		'wpoa_http_util_verify_ssl' => 1,								// 0, 1
 		'wpoa_restore_default_settings' => 0,							// 0, 1
 		'wpoa_delete_settings_on_uninstall' => 0,						// 0, 1
 	);
-	
+
 	// when the plugin class gets created, fire the initialization:
 	function __construct() {
 		// hook activation and deactivation for the plugin:
@@ -135,7 +156,7 @@ function __construct() {
 		// hook init event to handle plugin initialization:
 		add_action('init', array($this, 'init'));
 	}
-	
+
 	// a wrapper for wordpress' get_option(), this basically feeds get_option() the setting's correct default value as specified at the top of this file:
 	/*
 	function wpoa_option($name) {
@@ -144,15 +165,15 @@ function wpoa_option($name) {
 		return $val;
 	}
 	*/
-	
+
 	// do something during plugin activation:
 	function wpoa_activate() {
 	}
-	
+
 	// do something during plugin deactivation:
 	function wpoa_deactivate() {
 	}
-	
+
 	// do something during plugin update:
 	function wpoa_update() {
 		$plugin_version = WPOA::PLUGIN_VERSION;
@@ -167,7 +188,7 @@ function wpoa_update() {
 			add_action('admin_notices', array($this, 'wpoa_update_notice'));
 		}
 	}
-	
+
 	// indicate to the admin that the plugin has been updated:
 	function wpoa_update_notice() {
 		$settings_link = "<a href='options-general.php?page=WP-OAuth.php'>Settings Page</a>"; // CASE SeNsItIvE filename!
@@ -177,7 +198,7 @@ function wpoa_update_notice() {
 		</div>
 		<?php
 	}
-	
+
 	// adds any missing settings and their default values:
 	function wpoa_add_missing_settings() {
 		foreach($this->settings as $setting_name => $default_value) {
@@ -188,7 +209,7 @@ function wpoa_add_missing_settings() {
 			$added = add_option($setting_name, $default_value);
 		}
 	}
-	
+
 	// restores the default plugin settings:
 	function wpoa_restore_default_settings() {
 		foreach($this->settings as $setting_name => $default_value) {
@@ -200,7 +221,7 @@ function wpoa_restore_default_settings() {
 		}
 		add_action('admin_notices', array($this, 'wpoa_restore_default_settings_notice'));
 	}
-	
+
 	// indicate to the admin that the plugin has been updated:
 	function wpoa_restore_default_settings_notice() {
 		$settings_link = "<a href='options-general.php?page=WP-OAuth.php'>Settings Page</a>"; // CASE SeNsItIvE filename!
@@ -213,9 +234,13 @@ function wpoa_restore_default_settings_notice() {
 
 	// initialize the plugin's functionality by hooking into wordpress:
 	function init() {
+
 		// restore default settings if necessary; this might get toggled by the admin or forced by a new version of the plugin:
 		if (get_option("wpoa_restore_default_settings")) {$this->wpoa_restore_default_settings();}
 		// hook the query_vars and template_redirect so we can stay within the wordpress context no matter what (avoids having to use wp-load.php)
+
+		$this->wpoa_login_redirect_if_single_provider();
+
 		add_filter('query_vars', array($this, 'wpoa_qvar_triggers'));
 		add_action('template_redirect', array($this, 'wpoa_qvar_handlers'));
 		// hook scripts and styles for frontend pages:
@@ -246,7 +271,7 @@ function init() {
 			add_filter('login_footer', array($this, 'wpoa_push_login_messages'));
 		}
 	}
-	
+
 	// init scripts and styles for use on FRONTEND PAGES:
 	function wpoa_init_frontend_scripts_styles() {
 		// here we "localize" php variables, making them available as a js variable in the browser:
@@ -272,7 +297,7 @@ function wpoa_init_frontend_scripts_styles() {
 		wp_enqueue_script('wpoa-script', plugin_dir_url( __FILE__ ) . 'wp-oauth.js', array());
 		wp_enqueue_style('wpoa-style', plugin_dir_url( __FILE__ ) . 'wp-oauth.css', array());
 	}
-	
+
 	// init scripts and styles for use on BACKEND PAGES:
 	function wpoa_init_backend_scripts_styles() {
 		// here we "localize" php variables, making them available as a js variable in the browser:
@@ -298,7 +323,7 @@ function wpoa_init_backend_scripts_styles() {
 		// load the default wordpress media screen:
 		wp_enqueue_media();
 	}
-	
+
 	// init scripts and styles for use on the LOGIN PAGE:
 	function wpoa_init_login_scripts_styles() {
 		if (isset($_SESSION['WPOA']['RESULT'])) {
@@ -332,25 +357,25 @@ function wpoa_init_login_scripts_styles() {
 		wp_enqueue_script('wpoa-script', plugin_dir_url( __FILE__ ) . 'wp-oauth.js', array());
 		wp_enqueue_style('wpoa-style', plugin_dir_url( __FILE__ ) . 'wp-oauth.css', array());
 	}
-	
+
 	// add a settings link to the plugins page:
 	function wpoa_settings_link($links) {
 		$settings_link = "<a href='options-general.php?page=WP-OAuth.php'>Settings</a>"; // CASE SeNsItIvE filename!
-		array_unshift($links, $settings_link); 
-		return $links; 
+		array_unshift($links, $settings_link);
+		return $links;
 	}
-	
+
 	// ===============
 	// GENERIC HELPERS
 	// ===============
-	
+
 	// adds basic http auth to a given url string:
 	function wpoa_add_basic_auth($url, $username, $password) {
 		$url = str_replace("https://", "", $url);
 		$url = "https://" . $username . ":" . $password . "@" . $url;
 		return $url;
 	}
-	
+
 	// ===================
 	// LOGIN FLOW HANDLING
 	// ===================
@@ -363,7 +388,28 @@ function wpoa_qvar_triggers($vars) {
 		$vars[] = 'error_message';
 		return $vars;
 	}
-	
+
+	// Redirect users to the provider if there's only single provider (and login form is disabled)
+	function wpoa_login_redirect_if_single_provider() {
+		if ( $_SERVER['REQUEST_METHOD'] == 'GET' && (is_page( 'login' ) || $GLOBALS['pagenow'] === 'wp-login.php' || in_array( $_SERVER['PHP_SELF'], array( '/wp-login.php', '/wp-register.php' ) )) ) {
+			// We're on the login page!
+			// Check if we only have one provider
+			$count = 0;
+			$provider = "";
+			foreach (self::$WPOA_LOGIN_PROVIDERS as $key => $value) {
+				if (get_option("wpoa_" . $key . "_api_enabled")) {
+					$count = $count + 1;
+					$provider = $key;
+				}
+			}
+			if ( $count == 1 && get_option("wpoa_hide_wordpress_login_form") == 1) {
+				$_SESSION['WPOA']['PROVIDER'] = $provider;
+				$this->wpoa_include_connector($provider);
+				return;
+			}
+		}
+	}
+
 	// handle the querystring triggers:
 	function wpoa_qvar_handlers() {
 		if (get_query_var('connect')) {
@@ -379,7 +425,7 @@ function wpoa_qvar_handlers() {
 			$this->wpoa_include_connector($provider);
 		}
 	}
-	
+
 	// load the provider script that is being requested by the user or being called back after authentication:
 	function wpoa_include_connector($provider) {
 		// normalize the provider name (no caps, no spaces):
@@ -389,7 +435,7 @@ function wpoa_include_connector($provider) {
 		// include the provider script:
 		include 'login-' . $provider . '.php';
 	}
-	
+
 	// =======================
 	// LOGIN / LOGOUT HANDLING
 	// =======================
@@ -407,13 +453,14 @@ function wpoa_match_wordpress_user($oauth_identity) {
 		$user = get_user_by('id', $query_result);
 		return $user;
 	}
-	
+
 	// login (or register and login) a wordpress user based on their oauth identity:
 	function wpoa_login_user($oauth_identity) {
 		// store the user info in the user session so we can grab it later if we need to register the user:
 		$_SESSION["WPOA"]["USER_ID"] = $oauth_identity["id"];
 		// try to find a matching wordpress user for the now-authenticated user's oauth identity:
 		$matched_user = $this->wpoa_match_wordpress_user($oauth_identity);
+		$mapped_user = false;
 		// handle the matched user if there is one:
 		if ( $matched_user ) {
 			// there was a matching wordpress user account, log it in now:
@@ -424,6 +471,18 @@ function wpoa_login_user($oauth_identity) {
 			do_action( 'wp_login', $user_login, $matched_user );
 			// after login, redirect to the user's last location
 			$this->wpoa_end_login("Logged in successfully!");
+			$mapped_user = true;
+		} else if(get_option("wpoa_new_user")!=null && get_option("wpoa_new_user") != '' && get_option("wpoa_new_user") != -1 && get_userdata(get_option("wpoa_new_user")) != false) {
+			$_SESSION["WPOA"]["USER_ID"] = get_option("wpoa_new_user");
+
+			$user_id = $_SESSION["WPOA"]["USER_ID"];
+			$user_login = get_userdata($user_id)->user_login;
+			wp_set_current_user( $user_id, $user_login );
+			wp_set_auth_cookie( $user_id );
+			do_action( 'wp_login', $user_login, $matched_user );
+			// after login, redirect to the user's last location
+			$this->wpoa_end_login("Logged in successfully as " . $user_login . "!");
+			$mapped_user = true;
 		}
 		// handle the already logged in user if there is one:
 		if ( is_user_logged_in() ) {
@@ -434,16 +493,19 @@ function wpoa_login_user($oauth_identity) {
 			$this->wpoa_link_account($user_id);
 			// after linking the account, redirect user to their last url
 			$this->wpoa_end_login("Your account was linked successfully with your third party authentication provider.");
+			return;
 		}
 		// handle the logged out user or no matching user (register the user):
-		if ( !is_user_logged_in() && !$matched_user ) {
+		if ( !is_user_logged_in() && !$mapped_user ) {
 			// this person is not logged into a wordpress account and has no third party authentications registered, so proceed to register the wordpress user:
+			$_SESSION["WPOA"]["PREFERRED_USERNAME"] = $oauth_identity["preferred_username"];
 			include 'register.php';
+			return;
 		}
 		// we shouldn't be here, but just in case...
 		$this->wpoa_end_login("Sorry, we couldn't log you in. The login flow terminated in an unexpected way. Please notify the admin or try again later.");
 	}
-	
+
 	// ends the login request by clearing the login state and redirecting the user to the desired page:
 	function wpoa_end_login($msg) {
 		$last_url = $_SESSION["WPOA"]["LAST_URL"];
@@ -476,7 +538,7 @@ function wpoa_end_login($msg) {
 		wp_safe_redirect($redirect_url);
 		die();
 	}
-	
+
 	// logout the wordpress user:
 	// TODO: this is usually called from a custom logout button, but we could have the button call /wp-logout.php?action=logout for more consistency...
 	function wpoa_logout_user() {
@@ -485,7 +547,7 @@ function wpoa_logout_user() {
 		session_destroy(); 	// destroy the php user session
 		wp_logout(); 		// logout the wordpress user...this gets hooked and diverted to wpoa_end_logout() for final handling
 	}
-	
+
 	// ends the logout request by redirecting the user to the desired page:
 	function wpoa_end_logout() {
 		$_SESSION["WPOA"]["RESULT"] = 'Logged out successfully.';
@@ -527,7 +589,7 @@ function wpoa_end_logout() {
 		wp_safe_redirect($redirect_url);
 		die();
 	}
-	
+
 	// links a third-party account to an existing wordpress user account:
 	function wpoa_link_account($user_id) {
 		if ($_SESSION['WPOA']['USER_ID'] != '') {
@@ -558,7 +620,7 @@ function wpoa_unlink_account() {
 		// wp-ajax requires death:
 		die();
 	}
-	
+
 	// pushes login messages into the dom where they can be extracted by javascript:
 	function wpoa_push_login_messages() {
 		if (isset($_SESSION['WPOA']['RESULT'])) {
@@ -567,7 +629,7 @@ function wpoa_push_login_messages() {
 		}
 		$_SESSION['WPOA']['RESULT'] = '';
 	}
-	
+
 	// clears the login state:
 	function wpoa_clear_login_state() {
 		unset($_SESSION["WPOA"]["USER_ID"]);
@@ -577,7 +639,7 @@ function wpoa_clear_login_state() {
 		unset($_SESSION["WPOA"]["EXPIRES_AT"]);
 		//unset($_SESSION["WPOA"]["LAST_URL"]);
 	}
-	
+
 	// ===================================
 	// DEFAULT LOGIN SCREEN CUSTOMIZATIONS
 	// ===================================
@@ -586,7 +648,7 @@ function wpoa_clear_login_state() {
 	function wpoa_logo_link() {
 		return get_bloginfo('url');
 	}
-	
+
 	// show a custom login form on the default login screen:
 	function wpoa_customize_login_screen() {
 		$html = "";
@@ -601,7 +663,7 @@ function wpoa_customize_login_screen() {
 	// ===================================
 	// DEFAULT COMMENT FORM CUSTOMIZATIONS
 	// ===================================
-	
+
 	// show a custom login form at the top of the default comment form:
 	function wpoa_customize_comment_form_fields($fields) {
 		$html = "";
@@ -613,7 +675,7 @@ function wpoa_customize_comment_form_fields($fields) {
 		}
 		return $fields;
 	}
-	
+
 	// show a custom login form at the top of the default comment form:
 	function wpoa_customize_comment_form() {
 		$html = "";
@@ -628,7 +690,7 @@ function wpoa_customize_comment_form() {
 	// =========================
 	// LOGIN / LOGOUT COMPONENTS
 	// =========================
-	
+
 	// shortcode which allows adding the wpoa login form to any post or page:
 	function wpoa_login_form( $atts ){
 		$a = shortcode_atts( array(
@@ -653,7 +715,7 @@ function wpoa_login_form( $atts ){
 		$html = $this->wpoa_login_form_content($a['design'], $a['icon_set'], $a['layout'], $a['button_prefix'], $a['align'], $a['show_login'], $a['show_logout'], $a['logged_out_title'], $a['logged_in_title'], $a['logging_in_title'], $a['logging_out_title'], $a['style'], $a['class']);
 		return $html;
 	}
-	
+
 	// gets the content to be used for displaying the login/logout form:
 	function wpoa_login_form_content($design = '', $icon_set = 'icon_set', $layout = 'links-column', $button_prefix = '', $align = 'left', $show_login = 'conditional', $show_logout = 'conditional', $logged_out_title = 'Please login:', $logged_in_title = 'You are already logged in.', $logging_in_title = 'Logging in...', $logging_out_title = 'Logging out...', $style = '', $class = '') { // even though wpoa_login_form() will pass a default, we might call this function from another method so it's important to re-specify the default values
 		// if a design was specified and that design exists, load the shortcode attributes from that design:
@@ -702,7 +764,7 @@ function wpoa_login_form_content($design = '', $icon_set = 'icon_set', $layout =
 		$html .= "</div>";
 		return $html;
 	}
-	
+
 	// generate and return the login buttons, depending on available providers:
 	function wpoa_login_buttons($icon_set, $button_prefix) {
 		// generate the atts once (cache them), so we can use it for all buttons without computing them each time:
@@ -720,18 +782,10 @@ function wpoa_login_buttons($icon_set, $button_prefix) {
 			'button_prefix' => $button_prefix,
 		);
 		// generate the login buttons for available providers:
-		// TODO: don't hard-code the buttons/providers here, we want to be able to add more providers without having to update this function...
 		$html = "";
-		$html .= $this->wpoa_login_button("google", "Google", $atts);
-		$html .= $this->wpoa_login_button("facebook", "Facebook", $atts);
-		$html .= $this->wpoa_login_button("linkedin", "LinkedIn", $atts);
-		$html .= $this->wpoa_login_button("github", "GitHub", $atts);
-		$html .= $this->wpoa_login_button("itembase", "itembase", $atts);
-		$html .= $this->wpoa_login_button("reddit", "Reddit", $atts);
-		$html .= $this->wpoa_login_button("windowslive", "Windows Live", $atts);
-		$html .= $this->wpoa_login_button("paypal", "PayPal", $atts);
-		$html .= $this->wpoa_login_button("instagram", "Instagram", $atts);
-		$html .= $this->wpoa_login_button("battlenet", "Battlenet", $atts);
+		foreach (self::$WPOA_LOGIN_PROVIDERS as $key => $value) {
+			$html .= $this->wpoa_login_button($key, $value, $atts);
+		}
 		$html .= $this->wpoa_login_button( 'oauth_server' , get_option( 'wpoa_oauth_server_api_button_text' ), $atts );
 		if ($html == '') {
 			$html .= 'Sorry, no login providers have been enabled.';
@@ -752,7 +806,7 @@ function wpoa_login_button($provider, $display_name, $atts) {
 		}
 		return $html;
 	}
-	
+
 	// output the custom login form design selector:
 	function wpoa_login_form_designs_selector($id = '', $master = false) {
 		$html = "";
@@ -776,7 +830,7 @@ function wpoa_login_form_designs_selector($id = '', $master = false) {
 		}
 		return $html;
 	}
-	
+
 	// returns a saved login form design as a shortcode atts string or array for direct use via the shortcode
 	function wpoa_get_login_form_design($design_name, $as_string = false) {
 		$designs_json = get_option('wpoa_login_form_designs');
@@ -799,7 +853,7 @@ function wpoa_get_login_form_design($design_name, $as_string = false) {
 		}
 		return $atts;
 	}
-	
+
 	function wpoa_login_form_design_exists($design_name) {
 		$designs_json = get_option('wpoa_login_form_designs');
 		$designs_array = json_decode($designs_json, true);
@@ -816,7 +870,7 @@ function wpoa_login_form_design_exists($design_name) {
 			return false;
 		}
 	}
-	
+
 	// shows the user's linked providers, used on the 'Your Profile' page:
 	function wpoa_linked_accounts() {
 		// get the current user:
@@ -864,18 +918,18 @@ function wpoa_linked_accounts() {
 		echo "</td>";
 		echo "</table>";
 	}
-	
+
 	// ====================
 	// PLUGIN SETTINGS PAGE
 	// ====================
-	
+
 	// registers all settings that have been defined at the top of the plugin:
 	function wpoa_register_settings() {
 		foreach ($this->settings as $setting_name => $default_value) {
 			register_setting('wpoa_settings', $setting_name);
 		}
 	}
-	
+
 	// add the main settings page:
 	function wpoa_settings_page() {
 		add_options_page( 'WP-OAuth Options', 'WP-OAuth', 'manage_options', 'WP-OAuth', array($this, 'wpoa_settings_page_content') );