Security Revision 1

a few additional security paragraphs on - Exact Redirect Uri, SSL Validation, Implicit security, and misc other points