Update Impersonation tokens docs

• Issue: https://gitlab.com/gitlab-org/gitlab-ce/issues/25367
• MR: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/9099

Some updates:

• Change order of authentication mechanisms in API readme
• Add cURL examples in user API doc