Clarification to authtoken docs

Also fixed a minor typo.