styling fix for android webview
added missing result parameter. added extra reminder that headers must be set
enforce HSTS
removed unused instructions
extended instructions for submitting token requests