Tay OAuth service. Start auth at /oauth/login.