CoBook is the latest in a recent string of Mac apps doing OAuth wrong — opening the auth page in the app, instead of in a real browser.