Simplifications and cleanups.

* Simplify the OAuth RP API to use callbacks.
* Tease out common code from fx-desktop and iframe channels into the postmessage_receiver channel.
* Hook up the close button if iframed.
* Add a check in env-test to determine whether the user is in an iframe.
* Hook up the oauth_cancel message to the RP api.