Add the outward-bound part of the Cordova redirect flow to auth@exp#4413