WIP: Start on an OAuth RP include.js with a promises based API.

* Add an IFRAME channel that has the ability to communicate back to the parent window.

issue #1386
Possibly, we should check.