We're licensing hte spec under ASLv2. Add the LICENSE file, and add the short-form to as much of the source as is practical right now (adding it to json source is a massive pita).
Document the parameters and responses on /register and /account/password which are invoved in the user-interactive auth