Change Token DTO and implement javascript xauth service