use generated ws login token properly