If you are having issues getting the authentication to work with the cPanel B4H plugin and have made sure security tokens are enabled/functioning, then this error is generally caused by the following setting:

 

Hide login password from cgi scripts -> set to ON in WHM Tweak Settings

 

Try setting it to OFF (default)

cPanel & WHM API shell (for developers)  must also be turned ON