Fix: revert to token auth to bypass device identity checks and allow URL access

Dockerfile

@@ -51,12 +51,11 @@ if [ ! -f /root/.openclaw/openclaw.json ]; then\n\
     "port": 7860,\n\
     "trustedProxies": ["0.0.0.0/0"],\n\
     "auth": {\n\
-      "mode": "password",\n\
-      "password": "${SETUP_PASSWORD}"\n\
+      "mode": "token",\n\
+      "token": "${SETUP_PASSWORD}"\n\
     },\n\
     "controlUi": {\n\
-      "allowInsecureAuth": true,\n\
-      "dangerouslyDisableDeviceAuth": true\n\
+      "allowInsecureAuth": true\n\
     }\n\
   },\n\
   "agents": {\n\