- [ ] 1. Refactor OauthManager to enforce only one instance of it existing at any time during runtime - [ ] 2. Move responsibility of generating state hash out of OauthManager