[pgb-oauth] use inappbrowser with proper oauth flow