Comment by quanganhdo

That sounds weird. I know this is not ideal but you can also use the password option - it isn’t stored on device and only used once to retrieve the API token. All subsequent requests use that token as well.

I added that so less savvy users can still log in easily without having to hunt for the token.