use PDO and add logging to demo-oauth-app