completely remove basic password authentication
fix Token name