fixed get token URL