First version of reverse oauth

Still a lot to do.
I made it like a cowboy.
Now I need to clean that up, and test it.
The problem also is that it's not json unless for the errors...