Update oauth.md

Remove subheading format