don't initiate oauth dance when access token is already set (eg via initial fragment parameter), issue #360
handle indexeddb errors & special case with firefox private browsing mode, refs #358