Update the TokenValidationSerializer information in the Readme to specify that the email or mobile alias must be provided as well.