Add API rate limit and two factor authentication doc

Document how to create an oauthtoken and set it in the config as defined in #2366.