improve OAuth flow docs [closes #190]