added another body + query for user token check