removed user token from url