Grading PR

[martypdx]

specific comments in code, general comments here:

server

• Missing basic golden-path http tests
• Only two individual routes are protected, seems like should be more
• putting the routes under an oauth folder, but then having those handle general selection details in confusing. Better to pick a broader term like "sources", "integrations", or something like that

app

• No tests