standardizing whether the route has slash or not, had it differently for POST in remoteOAuth2POST()