in openstack topic, appended tokes the auth url which the driver require...

In the openstack topic, it gives a sample cloud provider configuration file. This example is flawed because the identity url does not have tokens appended to the end. Without the /tokes in the identity URL, the keystone server rejects salt-cloud's authz request.