ID and Password for the API token.
The field needed for has_secure_password is password_digest.