Mention token auth in README.