Move design notes to subdirectory; working through some OAuth2 stuff