use token also for checking rate-limit