added Andy's transition example and the flow chart for oauth, AND the express server