Clarify OAuth 2.0 terminology