Quick note about the token used instead of password

Reminder that the token is NOT the same as what you get from the
authentication app.  Nope, it's the token that you use when calling the
GitHub API.