upgrade sbt-plugin
get a new oauth token every time

Don't even bother storing it in the session.  Use will be infrequent and
sporadic; storing that just means we have to invalidate/renegotiate it
later.  Drop it.