add a demo `token-login`, a test "test_token.py"
update `docs` for "Token-based Authentication"