removed redundant http token check