use token for API authentication
generate reportcards url with stored token