update phpdoc for authentication assertion
make the exchange token code example more explicit about its expectations