OAuth fix, new onboarding, and API v2
Big week for the authentication stack. Squashed a nasty OAuth token refresh bug that was affecting users on mobile, shipped the new onboarding experience we've been building for a month, and quietly rolled out API v2 with rate limiting to all accounts.