update documentation for oauth2 app