improve oauth2 explanation