Almost done with oauth2 and client discovery document.  Still need to add explanation of token