Fix OAuth (/try_do_oauth works), add /session_debug, secret is secret.

hi #5