added error references, cleaned up language in a few places
added xref to client secret