ensure references to OAuth are OAuth2, in docs
clarify provenance of the redirect URL in docs