Push token from browser to client

Do a version where the browser pushes the token back to the client.

• client picks a random localhost port to listen to.
• client requests token and offers url to reply to.
• browser gets auth and then serves a page that communicates to the url.
• client accepts token and replies success.

Due to cross-site scripting, might need to do this via an IMG tag.