Social login without the front-end "Signing you in…" interstitial — redirect-only OAuth flow in the API (open to migrating off passport) #155