added get token endpoint