YES! Got authorization working. callback.html populated with the not-mentioned-anywhere JS to populate the opener with its data