clarified definition of Initial Access Token
made developer registration example scenario use OAuth 2.0 to fetch Initial Access Token
moved lifecycle discussion to appendix
differentiating servers is out of scope, closes #76 closes #78
security considerations around public clients, suggest expiration of registered clients if necessary, closes #77
cleanup
added some contributors.