Notes on creating a custom `obtain_auth_token` view.  Fixes #641.