Stricter sanity checking for API tokens

[favonia]

This issue is to improve error messages when the token is (potentially) invalid.

1. Use Cloudflare API to verify the token when the API access always fails.
2. Check possible extra quotation marks