Allow adding custom parameters to the callback for OAuth.

In addition, allow consumer not to specify consumer key when redirecting
the user. This prevents consumer key be displayed in the location bar
and stored in the browser's history.

Change-Id: I0a88818969a37145171c310050de2b3daadf72fa
Merge "Allow adding custom parameters to the callback for OAuth."