Use PIN code instead of callback URL for OAuth.

 - target API 17