Update api.md

Fixed numbering in "How to authenticate with OAuth2"