Fix some security issues in OAuth 2 AuthActions

Closes #194
Closes #195