update docs with oauth basics