Encrypt API token and make field password for security

The Gitlab API allows users to perform various actions with just a token, including certain write/modify events. Therefore any leak of a token could allow external users to perform actions under an ID other than theirs. This change makes the token input into a password field to hide the value and changes the java field into a `Secret` to ensure its value is encrypted on disk when next saved.