https://github.com/mozilla/fxa-oauth-server/issues/27