fix execution order, handle OAuth verifier errors. fixes #4