Update docs to reflect new OAuth2 interaction