#774: No NPE anymore on the permission bean. API now takes an API token (readme updated)