OAuth allow - explicitly set URL to return to.

This solves the IE issue whereby IE doesn't always send the referer header.  Testing with IE9 and IE10, it appears that IE doesn't always send the correct HTTP Referer header, and since the user login logic checks for the referer to send the user back to the right place post-login, we should explicitly set the OAuth authorisation URL to go back to.