Ah so it's not my actual password, it's a token. That's better at least