prevent accidental use of undefined OKAPI keys
use dedicated class for OAuth tokens