crudely read config and use priv token to log in