Minor fix on OAuth2 doc