Misc changes

- more timing logged
- when testing in browser, using forcetk.ui
So is this just to have a means to have a fully JS-driven OAuth process that can be used independently of the Mobile SDK?