[Browser ext.] Update docs to recommend API token for auth

[spalmurray-codecov]

With the settings UI rewrite, we're good to go with recommending API tokens as the default auth mechanism. Session auth has proved to be the source of many an issue, API tokens don't suffer from the same shortcomings.