acceptToken origin redirect option