implemented issue #6
fixed issue #6
better private token login method