oauth wasn't logging in properly, also fixed api status_show to return last public post, not the last private post