test server interaction (must login first)
server stuff

now that the private keys are no longer hardcoded in the scripts, I can
finally check them into version control.
add the php

yay, no more hardcoded secrets!
display errors
don't cause needless panic over clearing cookies
hide unsupported field types
remind the testsuite users to log in
return errors if the upload fails

I should also check for errors in the xml part.
check for errors in the oauth requests
store the proper token
lead the user back to the good stuff