(WIP) FxA oauth support

https://bugzilla.mozilla.org/show_bug.cgi?id=1041814
Nit: might be confusing that this is under `fxa-oauth` routes file, but is not part of `/fxa-oauth`