First portion of binstar FAQ

This pull request contains mostly improvements of documentation in authentication and authorization topics. I will add a new commits with other topics in the nearest future.
Generally all of your *tokens* should be kept private 

Should be :

Treat your tokens like passwords