Issue #14: doc the OAuth workflow