Add oauth_callback=oob to force PIN to appear