changed qrcode to url and take with token