removed token from ajax