Use access manager in browser. TODO. get token from cookie.