set url where user can get login token