WIP oauth2-upgrade: oauth2 upgrade and REST fixes

Remove:
```python 
session.clear()
return resp
```