By now, the plugin should use the authentication method of private tokens. This is quite a bad method because it sends important keys in plain text. Understand what is the more secure method, and try to change the plugin and make it use it.