This sentence was written at the time when backend used access token, nowadays, users need to generate and use application password instead, see #6398.
