better logging on clef oauth errors
better logging EVERYWHERE
output oauth codes before sending
update dokku env vars
maintain scope when generating keys