Set default token to allow all domain