I created the draft for error responses. In addition I updated tokens storage section.
I update access token obtain flow.
I finished OAUTH2 error responses spec.
I added the idp specification. It does not support profile creation.
I added roa security specification.
I added roa security specification.