Issue 1386 iframed oauth flow

Here is iframing! based on `add-a-broker` and should be reviewed afterwards.
> We are trying to convey 

Most users should never see this error though? So this can be pretty generic