WIP: Start on an OAuth RP include.js with a promises based API.

* Add an IFRAME channel that has the ability to communicate back to the parent window.

issue #1386
This is going to kickoff the oauth flow, so the server here is the Oauth server, which happens to redirect to content server. It should default to prod, and we can allow the caller to override it via an option to point to other envs.