updated get_token

passing userdata as data rather than params forces requests to automatically append the content-length, which is required in some applications