make sure the oauth endpoints are configurable.
update dashboard. moved RAW API endpoint outside of the secure block.