OAuth dance ends at originating url

Closes #122