better description for oauth identity token