Instagram Auth Changes Merged

the commits are reasonably well explained but I'll stay reachable. if you prefer rebasing / cherry picking yourself (tbh my preference too), I have branches on my fork to that effect. oh yeah and it passes spec on my computer, so this is partially to verify with the help of the CI

cheers
-patrick
Is there any particular reason why we allow string here? In case of Facebook and LinkedIn, we allow only arrays, I suggest the same here