hack in oauth_receiver to circumvent same-origin