Create an auth flow, that doesn't necessarily involve being redirected to the other url and then back.