a few additional security paragraphs on - Exact Redirect Uri, SSL Validation, Implicit security, and misc other points
Merge pull request #48 from bshaffer/security-revision-1

Security Revision 1