Continuing last weekend's docs of all the un-specified parts of OAuth 2.0, things were going well until... aaron.pk/n4ZG3