Push token from browser to client
Do a version where the browser pushes the token back to the client.
- client picks a random localhost port to listen to.
- client requests token and offers url to reply to.
- browser gets auth and then serves a page that communicates to the url.
- client accepts token and replies success.
Due to cross-site scripting, might need to do this via an IMG
tag.