Issue 1386 iframed oauth flow

Here is iframing! based on `add-a-broker` and should be reviewed afterwards.
fixed!