added some documentation
don't send your app secrets dumbass