adding token to html requests