Issue 1386 iframed oauth flow

Here is iframing! based on `add-a-broker` and should be reviewed afterwards.
Where does this get used? I don't see another reference to `this._closeButton` in the diff.