handle put token via json payload