I thought this shitty task was already retired 
But people still bang their heads against a wall. This task won’t teach you anything. It’s just a flag bruteforcing task using strings from the script.
Got the “Good Job” within 5 minutes, but the password didn’t work? I had to just brute force it by putting in shorter and shorter lengths until it was accepted. Seriously, WTF? This was garbage.
I finally got this to submit. Just think about the format of the Token and how the “password” might screw that up. This was a needlessly broken flag.
The reversing was cool, just the flag structure is jacked.
Was a funny one, easy to solve… if it would not be so jacked from the flag itself…
Easy one…
stuck with the flag 
this shouldn’t be part of the challenge, should it?
I got it.