Issue 1386 iframed oauth flow

Here is iframing! based on `add-a-broker` and should be reviewed afterwards.
Should we turn this value (and the fox-logo's value) into variables?