Further refactoring of [rest] and [oauth]:

- cookie auth now uses curl multi as well and is cancellable
- error on preparation does not output data to status outlet