Use custom URL scheme, use third-party app auth string