Serve oauth at /a/oauth/ (with trailing slash).
Create a "controller" struct and handler type for serving API content.
Refactor API serving code to use controllers package.