accept login_token api requests