Standardise oauth return url for client apps

[chrisjsimpson]

We RECOMMEND (https://www.ietf.org/rfc/rfc2119.txt) api clients use the route /oauth_redirect for their return url handling.

This is a recommendation to create consistency, and needs to be put into docs.