Update tokens.md

Instructions for using tokens to allow a 3rd party to interface with your account needed more explanation. I sought support on IRC and given what I learned updated these docs to provide the explanation that I feel was missing and would have saved me time.