[WIP] Adds FxA OAuth support

### Work in progress
This handling of bad state errors will likely be too simplistic. See the "second issue" I raise [here](https://github.com/mozilla/fxa-content-server/pull/1205#issuecomment-45284579).