Updates authentication section

I was not able to exchange my code for a token without specifying the original
redirect_uri that I supplied in the first place. I don't remember this being
the case in the past; perhaps @igstan knows what changed.

Anyway, I updated the relevant documentation to match.
Merge pull request #7 from Shoeboxed/alex/auth

Updates authentication section