manage apps from menu
move all oauth into cdr to avoid engine-within-engine complications
purged of doorkeeper