Normalizing auth flow between native and hybrid.

NB: I haven't updated the "auto-refresh" functionality in SFRestAPI yet, as it's kind of special case for auth flow, and I want to consider it a little bit further.