CMS OAuth proxy. See /auth to start a flow.