Browser half of the TenaLanding hand-off: read the one-time code out of the URL fragment and exchange it for your application's own tokens.