removed tokenUrl setting