added necessary contraints and more documentation on the new OAuth processes