added a user manual to document oauth endpoints and general API structure