rework all the oauth JS into non-angular code; then integrate into NG where necessary
remove testing values