proper PosURL token, all test suites pass