Moved OAuth handling entirely to app, getting rid of external PHP redirect OAuth handler page