Use API token instead of password
Changelog entry