forgot to save token to session, should work now