I've added the api_token and removed email/password. https://github.com/bjdixon/oneanddone-tests/commit/ca76ab9e8f08df74b7e7f182ad6f9cd7c8448027