moved js of oauth to js aof app, minor html changes