v0.3: Correct authenticate redirect and session start issue

being called too late in the WP process
Improve error messages for retrieving access tokens
Improve error messages for credentials based auth