OAUTH verified with JavaScript obtaining token and code