Move oauth/index.php to match DirectoryIndex

This setting in .htaccess would let oauth/ being listed if the site has
`Option +Indexes`.