I’ve read the entire source code. I understand the flow of the challenge, however, unsure about the newline which seems to be a part of the solution. Also, uncertain whether the private key is reachable (I don’t see how you can modify the data in the token, without it).
You can PM me or write here, thank you.