Minor clarifications to token-based User-Interactive Authentication.