read user's auth_token from file

TODO: put file in some reasonable location, rather than straight in the
home folder.