Add controller documentation (first version)

What about:

```markdown
Authentication is based on a token shared by all the Cozy stack.
This token should be sent in 'x-auth-token' request header. This token is stored in "/etc/cozy/stack.token" by default but this is configurable. Accessing it requires `sudo` privileges.
```
This can be improved but it looks more accurate to me.