add personal access token docs too