routes/token.js