added oauth flow to documentation