exchange the TOKEN in the background once the user start the server lock.js