cleaned up oAuth flow, and removed non-authy stuff