More work, some progress made.

resources/templates/login.html

@@ -1,7 +1,8 @@
 {% extends "base-unauthenticated.html" %}
 {% block content %}
       <p>
-        We're not going to do login in the long term; we're going to use oauth.
+        We're not going to do login in the long term; we're going to use
+        <a href="https://oauth.net/2/">oauth</a>.
         This is a temporary login form.
       </p>
       <form action="auth" method="post">