this is creating a token, not validating it
added the error reporting path