Авторизация через cURL QIWI

<?php
error_reporting(E_ALL);
$USER_LOGIN = "";
$USER_PASSWORD = "";
$url="https://w.qiwi.com/auth/login.action";
$cookie_file = $_SERVER["DOCUMENT_ROOT"]."/fee/cookie.data";
 
//Просим токен
$post="source=MENU&login=$USER_LOGIN&password=$USER_PASSWORD";
 
    $ch = curl_init($url);
    curl_setopt($ch, CURLINFO_HEADER_OUT, 1);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($ch, CURLOPT_TIMEOUT, rand(3, 10));
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0');
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 1);
    curl_setopt($ch, CURLOPT_REFERER, 'https://qiwi.com/payment/main.action');
    curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie_file);
    curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie_file);
    $html = curl_exec($ch);
    $html = json_decode($html,1);
    $token = $html["data"]["token"];
    
    
//повторяем авторизацию с токеном
$post = "source=MENU&login=$USER_LOGIN&password=$USER_PASSWORD&loginToken=$token"; 
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
    curl_exec($ch);
// завершили   
 
// баланс     
    $url = "https://w.qiwi.com/person/state.action";
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch,CURLOPT_REFERER, $ref);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, "");
    $html = curl_exec($ch);
    $html = json_decode($html,1);
    //print_r( $html);
    print "Руб: ".$html["data"]["balances"]["RUB"];
    
    
    curl_close($curl);
 ?>

curl('https://m.qiwi.ru/login.action', 'phone='.urlencode(91234567890).'&password='.urlencode('123456'));