WIP: Start on an OAuth RP include.js with a promises based API.

* Add an IFRAME channel that has the ability to communicate back to the parent window.

issue #1386
Not sure if it makes sense, but would we want to inline data-uri the image here?