Allow tools to post id, cert to the signer and redirect back to the tool (without pop-up)

Tool posts such info to index.php page directly.
It will redirect back to Tool (provided via backto parameter) after user clicked 'Authorise' button, together with speak for credential