Remove hardcoded tokens and move token input to querystring