WIP: Start on an OAuth RP include.js with a promises based API.

* Add an IFRAME channel that has the ability to communicate back to the parent window.

issue #1386
Should this be hardcoded to localhost, or pulled from some config somewheres?