get rid of max_auth_age in oauth flow as there is no way to verify the login actually happened this recently
also removed some unnecessary log statements