http://blog.ghacklabs.com/fixing-browser-oauth-https-chrome/