users.md

Since we migrated all PersonlAccessTokens to store only its hash in the
DB, the token value can no longer be shown to the user.