Fixes code/documentation inconsistencies

Just a minor commit that fixes some (perceived) inconsistencies between what I read in the code and the documentation, while creating my own Oauth2 provider.