sign_in_with_oauth does not return code veriffier

[daic0r]

sign_in_with_oauth ought to return the code verifier, since that is needed in the callback form /authorize to do the code exchange.
Right now it only returns the URL to initiate the PKCE flow, but once the callback route is invoked, one cannot proceed because one cannot do the code exchange due to the missing code verifier.