removed misleading reference to oauth2 client