token supports get and posts