use getpass for token read