Fixes #3 - make API token accessible after first unlock