OAuth2 flow docs edits