added unit test for oauth redirect in widget
widget: removed duplicate call to requestToken that mysteriously didn't break anything...
added widget option 'redirectUri' to override redirect_uri parameter in oauth redirect (refs #282)
carry previous URI fragment through oauth redirect by using the 'state' parameter