token is working with basic auth, but it is kind of wired.