web & leader: tune token

not test yet