Social Login Exchange

Exchange a short-lived social login_token for the app user, so the instance subdomain can establish a session after the fixed public OAuth callback verified the identity. Runs on the instance subdomain, so tenant (from the subdomain) must match the token's company.