shuffle oauth code in user class
OAuth bugfixes - handling odd error conditions
enforce oauth stuff
ui tweaks