fixed /token
moved assets -> html dir, token test in hack/setup.tests.js