update docs for authorisation token in header
add docs for revoking token