Stuff the Oauth access_token into the session so that app code can access it.