added URL decoding to token (iOS)