Look into casting Webathena into OAuth with postMessage profile

[davidben]

https://code.google.com/p/oauth2-postmessage-profile/

This would have been handy to know about earlier. Why does Google think of everything? :-)