rest url now always has some placeholder for token