cleanup includes
some DRYing
manual OAuth process, authorisation page could be opened in web view instead of Safari