WIP oauth2-upgrade: oauth2 upgrade and REST fixes

Replace with:
```python 
session.clear()
return resp
```