Specified some routes hoping that they won't match the OPTIONS method
Rearranged order so server is queried before OAuth (for /me)
Specified some route methods better
being more careful before deleting token