The prompt for password would happen during the boxen run and then the resulting token would get stored in config.token 

```
>> response = `curl -i -u #{config.login} -d '{"scopes": ["repo"]}' https://api.github.com/authorizations`; token = response.scan(/[0-9a-f]{40}/);
Enter host password for user 'fromonesrc':
```