docs/explanation for OAuth form fields (bug 866176)
move code, docs for API submission flow (bug 861319)
give reasons for all 4xx API responses (bug 855817)