Fix OAuth endpoint
Remove redundant constructor parameter
Check session state for login