KM2 - the additional attacks against OAuth 2.0 should also have a pointer

[Nat Sakimura]

In section 10, the introduction sentence leaves me wondering where the additional attacks against OAuth 2.0 should also have a pointer in this sentence:

 In addition to the all the security considerations discussed in OAuth
 2.0 [RFC6819], the following security considerations should be taken
 into account.

[Nat Sakimura]

Closed by error.

[Nat Sakimura]

Add references to RFC7515, 7516, 7518.

[Nat Sakimura]

Fixed #21.

→ <<cset 70a552613e2b>>