add note regarding the need to set http://localhost/callback as the redirect uri for all the oauth providers you register your application to