add random salt prompt to opauth config
fix broken session refresh when changing secret
update oauth functionality