Link oauth2 adapater into js folder.

Next step: add to manifest.
Add NOTES.md; explains architectural decisions.