[WIP] Adds FxA OAuth support

### Work in progress
You should be getting the `client_id` from the config, not an untrusted network request. You probably don't need it in this request at all.