OAuth callback endpoint.