Echoing a user's token to STDOUT is bad security