Added note to privacy section about access token