get token with POST method