Added redirect to OAuth2 callback on failure.
This adds a 'denied=1' query string parameter to indicate failure.
Updated v2 API docs to indicate 'denied' parameter.
Always send state back regardless.
Removed 'denied' parameter.
Added explicit link to return to app, upon OAuth deny.
Merge remote-tracking branch 'richsage/oauth-fail-callback'