[api] fix token trigger using payloads like github.com.

use standard base64 tokens