Now that sessions are doable, it's time to piece OAuth 1.0a authorisation flow and token together with sessions.
Goal:
[x] Write OAuth access tokens into session store when a OAuth authorisation flow completes successfully.
[x] Have one endpoint show the access token if one is present in session storage for the given user. Set up some redirects to make it all automatic.
Non-goals:
Try to make OAuth-authenticated requests to the OAuth Service Provider. That's the next step; so long as sessions can remember OAuth Access Tokens and Secrets, we're good.
Now that sessions are doable, it's time to piece OAuth 1.0a authorisation flow and token together with sessions.
Goal:
Non-goals: