change "iam" to "token", because token server uses new path name