change token name to checkout_token