fix #3: store token in localStorage instead of unsafe config file
Prepare 1.0.8 release