Still using native oauth redirection, but falling back to a url that actually does
the postmessage.