Minor documentation changes

Author: chriscarrollsmith

docs/architecture.qmd

@@ -2,7 +2,7 @@
 title: "Architecture"
 ---
 
-## Architecture
+## Data flow
 
 This application uses a Post-Redirect-Get (PRG) pattern. The user submits a form, which sends a POST request to a FastAPI endpoint on the server. The database is updated, and the user is redirected to a GET endpoint, which fetches the updated data and re-renders the Jinja2 page template with the new data.
 
@@ -39,6 +39,6 @@ dot.edge('F', 'G')
 dot.render('static/webapp_flow', format='png', cleanup=True)
 ```
 
-![Webapp Flow](static/webapp_flow.png)
+![Data flow diagram](static/webapp_flow.png)
 
 The advantage of the PRG pattern is that it is very straightforward to implement and keeps most of the rendering logic on the server side. The disadvantage is that it requires an extra round trip to the database to fetch the updated data, and re-rendering the entire page template may be less efficient than a partial page update on the client side.

docs/authentication.qmd

@@ -2,7 +2,7 @@
 title: "Authentication"
 ---
 
-## Authentication Flow
+## Security features
 
 This template implements a comprehensive authentication system with security best practices:
 
@@ -30,9 +30,9 @@ This template implements a comprehensive authentication system with security bes
    - Security-related errors don't leak information
    - Comprehensive error logging
 
-The diagrams below show the main authentication flows and security measures.
+The diagrams below show the main authentication flows.
 
-### Registration and Login Flow
+### Registration and login flow
 
 ``` {python}
 #| echo: false
@@ -85,9 +85,9 @@ auth.edge('generate_tokens', 'store_cookies', 'Set-Cookie')
 auth.render('static/auth_flow', format='png', cleanup=True)
 ```
 
-![Registration and Login Flow](static/auth_flow.png)
+![Registration and login flow](static/auth_flow.png)
 
-### Password Reset Flow
+### Password reset flow
 
 ``` {python}
 #| echo: false
@@ -100,13 +100,11 @@ reset.attr(rankdir='TB')
 reset.attr('node', shape='box', style='rounded')
 
 # Client-side nodes
-reset.attr(label='Client')
 reset.node('forgot', 'User submits forgot password form')
 reset.node('reset', 'User submits reset password form')
 reset.node('email_client', 'User clicks reset link')
 
 # Server-side nodes
-reset.attr(label='Server')
 reset.node('validate', 'Validation')
 reset.node('token_gen', 'Generate reset token')
 reset.node('hash', 'Hash password')
@@ -126,4 +124,4 @@ reset.edge('hash', 'db', 'Update')
 reset.render('static/reset_flow', format='png', cleanup=True)
 ```
 
-![Password Reset Flow](static/reset_flow.png)
+![Password reset flow](static/reset_flow.png)