Update loop doc

@tarekziade @Natim r?
> This doc is for users of the API

Yes it is why I think we shouldn't truncate the values in the response body.

I agree that we can truncate Authorization headers with `<stripped>` also we should provide a sample in the Hawk chapter.