README -

explain better on auth-flows here.