Cleanup OAuth docs and add note about Content-Type
Add note to using access token request

Consistent with the other notes and is in the spirit of the previous
comment
Add note to client-side section as well
Merge pull request #11 from harvesthq/update-oauth-docs

Update OAuth docs