OAuth step 2 - open browser for app approval