added an improved diagram for oauth2 and reference to code