Original author here. Upon inspection, these passwords are clearly not chosen by the user and, as far as I can tell, consist only of numbers and uppercase letters.
replyMore of an ugly authToken then.
replyRFC 1738 Uniform Resource Locators (URL) December 1994 section 2.2
reply