Allow personal access tokens

Possible resolution for two factor authentication not working => https://github.com/pearkes/gethub/issues/16.

Would something like this be ok?

If the user generates a personal access token they can skip the two factor login.

Cheers