README: user token create: use login instead of email or username