remove pivotal password from db and use token instead, add harvest name and email