design changes; oauth2 get valid auth token works