Added notes on token, anonymous and session based auth given recent github issue#644 on M2 repo