Location is sent to server, server needs to handle and verify token