`chmod` the config file to rw for user only

Prevent other users from potentially stealing the token.
Maybe it would be better to use the `options` argument to `writeFileSync` and set the mode there?