removed /token endpoint since it is in the fbuser