Fix rendering issue.

README.rst

@@ -283,10 +283,13 @@ Tokens security
 Authentication tokens generated by django-sesame contain:
 
 - The primary key of the user for which they were generated;
-- A revocation key which is used for invalidating tokens; it includes:
-    - The hashed password of the user, unless
-      ``SESAME_INVALIDATE_ON_PASSWORD_CHANGE`` is disabled;
-    - The last login date of the user, if ``SESAME_ONE_TIME`` is enabled.
+- A revocation key which is used for invalidating tokens.
+
+The revocation key includes:
+
+- The hashed password of the user, unless
+  ``SESAME_INVALIDATE_ON_PASSWORD_CHANGE`` is disabled;
+- The last login date of the user, if ``SESAME_ONE_TIME`` is enabled.
 
 Primary keys are in clear text. If this is a concern, you can write a custom
 packer to encrypt them. See "Custom primary keys" above for details.