Add token security

This works, and now tokens are mandatory - this means there is no other way but doing things right.

One caveat is that we can only set one token for all of github and all of gitlab, but I think that's a minor problem anyway.