Sample responses use user tokens when necessary
Add some notes on /oauth/token with password tokens
Add a comment that's useful for REPL debugging
Add warning about demo user being logged in