http://tetraph.com/covert_redirect/oauth2_openid_covert_redirect.html