auth/oauth: add tracing to session handlers and middleware, update logging

Created by: bobheadxi

I'm not terribly well-versed in this part of our codebase but we've been seeing repeated issues with users being signed out of frequently-deployed services. To try and debug this, I've added some instrumentation here and migrated our logging in stuff that looks relevant.

Test plan

tests pass