Improve OAuth2 app-only code and documentation