First crack at OAuth2 docs.