Infra 167 web oauth2

debug is disabled in production and some of these logs are probably good to have. For eg line 102