Document tokensKey

Also remove outdated TODO – we do actually attach the tokens now :)