A token can be passed as a query parameter