WIP: Add OAuth->browser plumbing.

Hey, where'd the whitelist go?