fix(oauth): prevent stale session timeouts after login

- stop callback forwarders by instance to avoid cross-session shutdowns
  - clear pending sessions for a provider after successful auth