Update OAuth docs

@dougfales @lanej0 Here are those changes to make note of the `Content-Type` for each type of request. Also, I cleaned up the Markdown formatting to fix the numbering (previously, every bullet point had "1.", which was weird).