When there's a token configured, it's used as the value of the password:

When deciding whether to configure authentication, there has to be a username:

With token-based authentication, a username isn't necessary. Instead, we should present the token as part of an Authentication: Bearer header.