pass redirect information around in a cookie because ... oauth