OAuth SP: put user auth pending request to oauth token table in the database, but store the identifier in the cookie.