adds a password to a league
requires a league password to create a team
renames api_token to access_token