added steps of how OAuth works