* document recovery token generation * run console anywhere to generate token Co-authored-by: Alex Fornuto <afornuto@pomerium.com>