feat: allow auth token-login
flag value as filepath to avoid leaking token into shell history
#1787
+56
−2