refactoring / reorganizing
now uses magical swagger OAuth tokenPaths