changed oauth URLs to be RESTier and implemented a simple warning when linking to an account fails