set redirect uri;
fix brokenness in AppSettingsDataStore
add empty admin controller to get the redirect
use force_approval parameter to ensure we get a refresh token
[broken] progress commit; about to switch directions with auth