change url to checking token