Update docs for token auth