Best Practices for OAuth with Fire Eagle

And also good pointers for anyone wanting to implement OAuth, especially in an iPhone app