OAuth2 callback

Handles the authorization code callback from the upstream OAuth2 provider. On success, redirects the user to the flow's return_to URL.