Redirect Magic Link to App

Note: This endpoint should not be called programmatically unless in test scenarios. Instead, it is visited when a magic link in an authorisation email is clicked by the app user. Upon visit, the VERIFY OTP is validated, and replaced with AUTH OTP. Then the visitor is redirected to an in-app deep URI, and the app takes over the authentication journey.