I think this document is well written and good as a recommendation.  Only one issue I would like to point out is the 
possibility of vulnerability by introducing username/password authentication though I won't claim not to include that 
method.