reversed popup communication, no longer use postMessage
use ie-compatible window.location.origin for redirectUri
check if window.atob exists
Merge remote-tracking branch 'origin/master'