OAuth allow - explicitly set URL to return to.
This solves the IE issue whereby IE doesn't always send the referrer header.
Merge remote-tracking branch 'richsage/oauth-ie-fix'