title: window.open without popup blocker using AJAX and manipulating the window.location
body: <p>When dealing with OAuth from the server, such as Twitter and Facebook, you most likely will redirect the user to an URL asking for app permission. Usually, after clicking a link, you send the request to the server, via AJAX, and then return the authorization URL. </p>
  
  <p>But when you try to use <code>window.open</code> when the answer is received, your browser blocks the popup, making it useless. Of course, you can just redirect the user to the new URL, but that corrupts the user experience, plus it's annoying. You can't use IFRAMES, but they are not allowed (because you can't see the location bar).</p>
  
  <p>So how to do it?</p>