Redesign/rewrite to be a purer oauth middleware

Huge rewrite to be a better implementation of an oauth client when responding to api calls from a frontend client.