added a api controller for authorizing an oauth application
added a comment for the code that goes in the app delegate for handling callbacks