Small change to TestOAuth for production

primary user profile endpoint is now 'profile' instead of 'user'
Handle error for OAuth login methods better

Ex: the user rejects authorization for the app.