Don't store oauth tokens in the database

[noodny]

As discussed with @simoneb, it's better to store the tokens in-memory - we'll have to store the app installation code in the database instead so we're able to fetch new oauth tokens when the app is restarted.