small updates to oauth server documentation