remove vToken part from req.url