Minor README.md cleanup (OAuth2 Token in settings.xml)

This way the text does not need a 3 level unordered list to be clear.