Updates authentication section

I was not able to exchange my code for a token without specifying the original
redirect_uri that I supplied in the first place. I don't remember this being
the case in the past; perhaps @igstan knows what changed.

Anyway, I updated the relevant documentation to match.
Shouldn't `--data-urlencode` be just `-d`?