make resources in PocketOAuthService private. add sections to synch.html