added display parameter to oauth_access_token

If trying to open the login dialog in a small popup, FB nags if you don't provide the display param in the URL.