Documentation: clarify multiple authentication methods

Took me a while to understand the behaviour when I provide multiple authentication tokens.

It would be more clear if Note 2 in this section included a link to the plugin execution order