Pull out the actual OAuth code into a separate service that the
controller depends on.
Servlet mounts now come from a map. This is key for what comes next
Fixed a test and some scalastyle errors