Problem

We have constantly fluctuated between 2 states when people do coder login:

1. Show the token in plaintext when the CLI token is pasted (not ideal, security risk)
2. Show nothing when the CLI token is pasted (not ideal, unclear UX)

Suggestion

When the token is pasted, show ********** to replace what is pasted. Some context and implementation details here