Oauth2 should support deep linking and expo (react-native) domains

When adding a callback url to Alpaca, it only allows http and https domains. This means that it is impossible to develop locally. Alpaca should allow domains like exp://192.168.80.26:8081 or example-app:// so that the Oauth2 flow can be tested locally and integrated with react-native.