updated oauth diagram and improved doc