Issue 1386 iframed oauth flow

Here is iframing! based on `add-a-broker` and should be reviewed afterwards.
@ryanfeeley and @johngruen - Any suggestions for a better string here? We are trying to convey that the iframe flow is only open to approved sites.