Fix: Don't set remote_auth_details unless token exchange is successful
Remove relationship validations (not useful in current state)
Update validations to expect GET post to return an object

e.g. {"post":{...}}
Add refs validations