Use token instead of username:password, added token request script