Fix dev build clash

The `/oauth2callback` method was being picked up by the `DevParametersLifecycle` in `dev-build`. It has now been white listed.

Redirecting didn't work because of clashing names for `IndexController`; renamed `IndexController` to `AdminIndexController`.

Added missing endpoints for `CommercialAdTools` @kenlim 

@NathanielBennett