fix(auth): warn on insecure token; use composite credentials on TLS

fix(auth): warn on insecure token; use composite credentials on TLS #81