(WIP) FxA oauth support

https://bugzilla.mozilla.org/show_bug.cgi?id=1041814
I think we'll use a `redirect_uri` with a special scheme like `fxa://oauth/` to signal this is a browser based oauth flow: https://github.com/mozilla/fxa-oauth-server/issues/110#issuecomment-52826069