write the api token to a file. drat -- looks like you can't set the Authorization header in a browser websocket request