Return a small local HTML confirmation after OAuth callback with the authenticated handle, while preserving callback validation and no-store caching.