i made a major change in authentication;
you no longer need to provide the token yourself.
the script does it for you. but, you will need to provide a user login and password via config so the script can claim the token itself.
my advise: create an extra user just for the purpose with permission to login and manage instances. the users credentials are not visible to the public - only the token which is used in the url the user gets.
Also, I switched to english labels with german localisation to follow.