Don't store authentication token in ~/.config

Please don't make the same mistake as `hub` does.
`~/.config` folder is used by `fish`, `cocoapods` and many other tools.

It's a folder intended to store configuration files.
That means people __are checking it in__ with their `dotfiles` repos.

Use the OS-level keychains, or require an ENV.