Document the loopback login default, custom client ID precedence, legacy-session compatibility, and the behavior users see during authorization.
Add a complete self-hosted client metadata example and the serving requirements for authorization servers that do not accept loopback clients.