Mentioned direct token authentication in readme.