http handler, token storage update