Changed bad URLs for API endpoint 'token'