require admin to see config
change oauth2callback endpoint
add oauth2callback
fail on logged out user accessing config
added permissions to prevent command creation for non-admin with a toggle
working full setup version with install instructions
better onboarding page