call whoami after getting token