diff --git a/Cargo.lock b/Cargo.lock
index 0dc4e0c53..27b573f0a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9959,6 +9959,7 @@ dependencies = [
  "hyper 0.14.28",
  "hyper-util",
  "itertools 0.14.0",
+ "jsonwebtoken",
  "oauth2 5.0.0",
  "oxide-auth",
  "oxide-auth-poem",
@@ -9967,6 +9968,7 @@ dependencies = [
  "rand 0.8.6",
  "rcgen",
  "regex",
+ "reqwest 0.11.26",
  "rstest",
  "sauth",
  "serde",
diff --git a/lib/observo/private b/lib/observo/private
index b90e4cf6d..8ad51beab 160000
--- a/lib/observo/private
+++ b/lib/observo/private
@@ -1 +1 @@
-Subproject commit b90e4cf6d3e783b68b1e1929492975f9cfaea24a
+Subproject commit 8ad51beaba38f07d3c20000bba6d6bf8fe304eb1
diff --git a/lib/observo/sauth/Cargo.toml b/lib/observo/sauth/Cargo.toml
index f30a6caaa..6f3be9f8d 100644
--- a/lib/observo/sauth/Cargo.toml
+++ b/lib/observo/sauth/Cargo.toml
@@ -35,14 +35,16 @@ serde_json.workspace = true
 toml.workspace = true
 hyper.workspace = true
 rand.workspace = true
-url = { workspace = true, optional = true }
+url.workspace = true
 # this is a hack to enable tracing in hyper-util (debugging can be difficult without this)
 hyper-util = { version = "0.1.10", optional = true, features = ["full"] }
+jsonwebtoken.workspace = true
+reqwest = { version = "0.11", default-features = false, features = ["json", "rustls-tls"] }
 
 [features]
 default = []
 test-support = ["dep:thiserror", "dep:poem", "dep:poem-derive", "dep:oxide-auth",
-  "dep:oxide-auth-poem", "dep:tempfile", "dep:rcgen", "dep:serde_urlencoded", "dep:url",
+  "dep:oxide-auth-poem", "dep:tempfile", "dep:rcgen", "dep:serde_urlencoded",
   "dep:hyper-util"]
 
 [dev-dependencies]