thundercats.org CMS OAuth broker. Routes: /auth, /callback.