examples/web-file-browser: on OAuth callback, confirm request token.

Added Token.matchesKey to make this easy to do correctly.