diff --git a/appview/oauth/oauth.go b/appview/oauth/oauth.go
--- a/appview/oauth/oauth.go
+++ b/appview/oauth/oauth.go
@@ -74,6 +74,10 @@ sessStore := sessions.NewCookieStore([]byte(config.Core.CookieSecret))
 
 	clientApp := oauth.NewClientApp(&oauthConfig, authStore)
 	clientApp.Dir = res.Directory()
+	// allow non-public transports in dev mode
+	if config.Core.Dev {
+		clientApp.Resolver.Client.Transport = http.DefaultTransport
+	}
 
 	clientName := config.Core.AppviewName
 
diff --git a/appview/state/login.go b/appview/state/login.go
--- a/appview/state/login.go
+++ b/appview/state/login.go
@@ -46,6 +46,7 @@ }
 
 		redirectURL, err := s.oauth.ClientApp.StartAuthFlow(r.Context(), handle)
 		if err != nil {
+			l.Error("failed to start auth", "err", err)
 			http.Error(w, err.Error(), http.StatusInternalServerError)
 			return
 		}