can get token by  js now