Decap OAuth proxy. Use /auth and /callback.