set up oauth endpoints and minor ui fixes