add oauth token note to getting started guide