some cleanup of extension auth flow and UI