KAZOO-2563: fix setting pvt fields on token
KAZOO-2563: added auth_token restrictions docs