added comment to OAuth login scenario