Have you tried add OAuth support to your web app?
After with, do your team do automated regressive tests the oauth support and all other functionalities on all the regular browsers and mobile browsers?
+ Older version browsers?
+ Older browsers in older version of Linux, Mac, Windows?
+ Browsers with plugins such umatix, unblock origin, noscript that blocks scripts from your own domains + other domains?