Try window.opener first in OAuth popup, then localStorage.

We've occasionally seen weird configurations of IE where localStorage
isn't shared between same-origin windows, so trying window.opener first
is safer.