simplified README

README.md

@@ -14,24 +14,11 @@ For user-experience testing we needed a way to destroy IdP
 session cookies. Since we don't support SLO, we needed something
 quick and dirty. The cookie cleaner runs at `https://weblogin.itlab.stanford.edu/clearidpcookie`
 
-### OAuth 2.0 Authorization Server
-
-We also have a fairly stock MitreID Connect server providing an
-OAuth 2.0 Authorization Service at `https://authz.itlab.stanford.edu/`
-
 ## server.xml
 
 All the configuration is in `etc/tomcat8/server.xml`. Since this Tomcat is not running
 behind an Apache proxy, it handles redirecting from port 80 to port 443.
 
-# The ROOT app
-
-`var/lib/tomcat8/webapps/ROOT` contains common CSS, JS, and image files, along with
-an HTML page describing how to use the IT Lab IdP.
-
-`var/lib/tomcat8/webapps/ROOT/certauth` currently returns an empty page to simulate
-the future certificate settings page; `WEB-INF/web.xml` loosens up the `X-Frame-...`
-options to allow `certauth` to be embedded in other apps' `iframe`s.