roles: fix ToC format and add link to overview

Author: idg-sam

4-AccessControl/1-app-roles/README.md

@@ -1,23 +1,28 @@
 # A Node.js & Express web app calling Microsoft Graph using App Roles to implement Role-Based Access Control
 
- 1. [Overview](#overview)
- 1. [Scenario](#scenario)
- 1. [Contents](#contents)
- 1. [Prerequisites](#prerequisites)
- 1. [Setup](#setup)
- 1. [Registration](#registration)
- 1. [Running the sample](#running-the-sample)
- 1. [Explore the sample](#explore-the-sample)
- 1. [About the code](#about-the-code)
- 1. [More information](#more-information)
- 1. [Community Help and Support](#community-help-and-support)
- 1. [Contributing](#contributing)
-
-![Build badge](https://identitydivision.visualstudio.com/_apis/public/build/definitions/a7934fdd-dcde-4492-a406-7fad6ac00e17/<BuildNumber>/badge)
+- [Overview](#overview)
+- [Scenario](#scenario)
+- [Contents](#contents)
+- [Prerequisites](#prerequisites)
+- [Setup](#setup)
+  - [Step 1: Clone or download this repository](#step-1-clone-or-download-this-repository)
+  - [Step 2: Install project dependencies](#step-2-install-project-dependencies)
+  - [Registration](#registration)
+  - [Choose the Azure AD tenant where you want to create your applications](#choose-the-azure-ad-tenant-where-you-want-to-create-your-applications)
+  - [Register the client app (msal-node-webapp)](#register-the-client-app-msal-node-webapp)
+  - [Define Application Roles](#define-application-roles)
+- [Running the sample](#running-the-sample)
+- [Explore the sample](#explore-the-sample)
+- [We'd love your feedback!](#wed-love-your-feedback)
+- [About the code](#about-the-code)
+  - [Implementing role-based access control](#implementing-role-based-access-control)
+- [More information](#more-information)
+- [Community Help and Support](#community-help-and-support)
+- [Contributing](#contributing)
 
 ## Overview
 
-This sample demonstrates a Node.js & Express web app featuring a todo list and secured with the [Microsoft Authentication Library for Node.js](). The app implements **Role-based Access Control** (RBAC) by using Azure AD **App Roles**. In the sample, a **dashboard** component allows signed-in users to see the tasks assigned to them and is only accessible by users under an **app role** named **TaskAdmin**.
+This sample demonstrates a Node.js & Express web app featuring a todo list and secured with the [Microsoft Authentication Library for Node.js](https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/lib/msal-node). The app implements **Role-based Access Control** (RBAC) by using Azure AD **App Roles**. In the sample, a **dashboard** component allows signed-in users to see the tasks assigned to them and is only accessible by users under an **app role** named **TaskAdmin**.
 
 Access control in Azure AD can be done with **Security Groups** as well, as we will cover in the [next tutorial](../2-security-groups/README.md). **Security Groups** and **App Roles** in Azure AD are by no means mutually exclusive - they can be used in tandem to provide even finer grained access control.
 
@@ -38,7 +43,7 @@ Access control in Azure AD can be done with **Security Groups** as well, as we w
 | `ReadmeFiles/`              | Contains illustrations and screenshots.                       |
 | `App/appSettings.json`      | Authentication parameters and settings                        |
 | `App/data/cache.json`       | Stores MSAL Node token cache data.                            |
-| `App/data/db.json`          | Stores todo list data.                                         |
+| `App/data/db.json`          | Stores todo list data.                                        |
 | `App/app.js`                | Application entry point.                                      |
 | `App/routes/router.js`      | Initializes msal-express-wrapper and handles routing.         |