properly echo $token inside html