some cleanup
added access control allow -> authorisation to Get Token