show oauth client secret on client view
add root level profile api endpoint to let external clients fetch user ids, etc
return category list as a hashr
merge master