Real adn authorization

Its not polished yet. A lot can go wrong and is not checked for.
But when there is no access_token in the config-file, an authorization request is done via ```xdg-open``` to start a browser. And the returned access_token is safed to the config-file and used.