Make more OAuth2.0 APIv3 requirement more prominent

* Also mention that we no longer issue new keys for APIv2.
Do we really need to inform users about this?