build url with token