[api][test] token managment needs account password as tokens are not sufficient yet