cleanup, removed vestigial text
cleaned up security considerations
updated credential rotation discussion
clarified registration examples and oauth 2.0 endpoint language
reworded initial access token definition
added hannes
clarified (I hope) ignore/understand language
spelling!