add sha1_token() section to readme