use token for pivotal and oauth for harvest