I think it's seems more reliable/robust for the user if we use just the token, by the way all other websites does something similar. But if it's an issue for the project I can refactor it.