Do a reverification for FxA PIN reset (bug 1085773)

WIP

See also https://github.com/mozilla/webpay/pull/563
It will always have `state`, `scope` and `client_id` in the query string already. https://github.com/mozilla/webpay/blob/master/webpay/base/helpers.py#L95