more debugging error info in OAuth2 handling