moving oauth into seperate assembly and recreating webapi project with proper elamh logging