remove '-' in user's token