Add note about access token while login is missing