Make example safe rather than warn in comment (#296)

Author: Tim Ruffles

README.md

@@ -33,8 +33,7 @@ import * as azdev from "azure-devops-node-api";
 // your collection url
 let orgUrl = "https://dev.azure.com/yourorgname";
 
-// ideally from config
-let token: string = "cbdeb34vzyuk5l4gxc4qfczn3lko3avfkfqyb47etahq6axpcqha"; 
+let token: string = process.env.AZURE_PERSONAL_ACCESS_TOKEN; // e.g "cbdeb34vzyuk5l4gxc4qfczn3lko3avfkfqyb47etahq6axpcqha"; 
 
 let authHandler = azdev.getPersonalAccessTokenHandler(token); 
 let connection = new azdev.WebApi(orgUrl, authHandler);