added some clarification on getting the auth code from the browser.