Add out-of-band auth, + always call a callback
Merge pull request #3 from zaption/oob

Add out-of-band auth, + always call a callback