I have a function in there for oauth, then when I visit the page I send a code that has sensitive information to the database, and was wondering if this was a safe thing to do?