The OIDC authorize endpoint now shows a login page asking for the user's AT Protocol handle before redirecting to their PDS for OAuth. This fixes the "Handle is required" error when starting OIDC auth.