new route to receive the token