The authorization endpoint now returns a 200 on "oob" oauth_callbacks.