updating to show access token is optional (#772)

* updating with respect to PRs and forks not needing token

using a newly created basic account

* updating

- spelling out PR per review
- clarify 
- mention ssh as an alternative

doc/dev/development.md

@@ -81,10 +81,14 @@ for how to do this for your platform.
 
 ### Setting up personal access token
 
-Since Istio requires two-factor authentication, you must setup a personal access
-token to enable push via HTTPS. Please follow [these
+This is only necessary for core contributors / to push changes to the main repo. 
+You can make Pull Requests without it but the additional security is recomended for everyone.
+
+To be part of the Istio organization, we require two-factor authentication, and
+you must setup a personal access token to enable push via HTTPS. Please follow [these
 instructions](https://help.github.com/articles/creating-a-personal-access-token-for-the-command-line/)
-for how to create a token.
+for how to create a token. 
+Alternatively you can [add your SSH keys](https://help.github.com/articles/adding-a-new-ssh-key-to-your-github-account/).
 
 ## Git workflow