using get instead of post to read data. token should be passed in a header parameter called x-token