accept extra params for token POST