Move callback URL to properties file, adjust docs.
Remove custom URL scheme from manifest.
Tidy up OAuth documentation a bit.