Set 123done up to serve either the iframe flow or the standard oauth flow.

Uses the fxa-relier-client

browse to `/` to use the normal flow.
browser to `/iframe` to use the iframe flow.
use the newest fxa-relier-client