added forgotten route for fetching token