completeAuthorization

Completes the authorization with the issuer's redirect back. The redirect is used up whatever happens: if this fails — the token request didn't get through, say — call beginAuthorization again, rather than retrying this.