OAuth todos

diff --git a/framework/Oauth/doc/TODO.txt b/framework/Oauth/doc/TODO.txt
new file mode 100644 (file)
index 0000000..b6a8fe6
--- /dev/null
+++ b/framework/Oauth/doc/TODO.txt
@@ -0,0 +1,2 @@
+http://www.hueniverse.com/hueniverse/2009/03/sunday-morning-homework.html
+http://www.hueniverse.com/hueniverse/2009/04/explaining-the-oauth-session-fixation-attack.html