Rework documentation

at the very least it should also include:

internals section (formalization of the serializing and signing algorithms)
caveats section (plain http dangers, req size performance issue)
inspector examples
