Link to create a personal access token in readme

If you are using two-factor authentication you can't use your regular password.
I think this is also possible if you're not using it, but haven't checked.
Set scopes to empty value because no scopes are needed, not even the defaults.