Maintain back-compat for oauth redirect flow.

Older clients (such as the meteor tool) should be able to login with
OAuth at newer app servers.