The oAuth profile for a service is now passed to update() and insert() when signing in via oAuth (or linking accounts).
e.g. `update(user, oAuthProfile)` and `insert(user, oAuthProfile)`
This provides a way to also capture oAuth provider specific fields, such as avatar, location, organisation, etc. as needed.
Thanks to @gielcobben for raising this.