adding comments for OAuth2 token login