switch logging to [info] to help diagnose OAuth failure