fix an issue that OAuth flow listener could receive the oauth created ev...

...ent while BoxClient itself is not authenticated.