small edits to web oauth2