more documentation update for token based authentication