WIP: Add OAuth->browser plumbing.

It seems a bit strange to order the receiver to close the window. Does it make more sense to send source to the receiver and let them decide what to do?