Update comment to clarify the code
Update comment to clarify the code

The credentials are embedded in auth.Token and Token.Generate()
verifies them prior to issuing a new token. For this reason there
is no credential-verification visible in the surrounding code.

1and1/soma