Using oauth will cause Browser Extensions and Applications to be unable to load the server url properly. Removing this line fixes the problem. Login page is secured by accounts already.