Use getOauthHawkSession for all /fxa-oauth endpoints.