done() -> exec()
/token and /logouth to /auth/token and /auth/logout