removed link to hueneverse writeup which now points to misinformation about OAuth protocol