Adding (and exposing) reusable auth tokens to get around a configuration issue seems like awfully bad advice.